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ABSTRACT 

This  technical  note  describes  the  development  of  a  tactical  data  link  message  dissector  for  the 
Wireshark  network  protocol  analyser.  Link  16  is  a  United  States  and  North  Atlantic  Treaty 
Organization  standard  for  secure  real-time  exchange  of  tactical  information  between  warfighting 
units.  Concurrent  with  military  adoption  of  Link  16  equipment,  training  simulators  are  being 
fitted  with  simulated  tactical  data  links.  The  extensions  made  to  Wireshark  provide  simulation 
engineers  with  a  tool  to  troubleshoot  Link  16  simulations. 
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Extending  the  Wireshark  Network  Protocol  Analyser 
to  Decode  Link  16  Tactical  Data  Link  Messages 

Executive  Summary 


Tactical  Data  Links  (TDLs)  enable  the  military  to  exchange  tactical  information  in  a 
precise,  efficient  and  timely  manner.  They  complement,  and  in  many  instances  substitute, 
traditional  voice-based  communication  bearers  such  as  VHP  radio.  Wireshark  is  an  open- 
source  network  protocol  analyser  that  provides  a  comprehensive  filtering  and  query 
system,  utilities  for  performing  statistical  analysis,  and  dissector  modules  to  decode  and 
analyse  protocol  content. 

This  technical  note  describes  modifications  to  Wireshark  enabling  it  to  analyse  Link  16 
tactical  data  link  messages.  A  dissector  module  was  written  to  decode  J-series  messages 
communicated  using  the  Simulation  Interoperability  Standards  Organization's  Standard  for 
Link  16  Simulations.  This  work  was  completed  as  a  summer  vacation  student  project  over  a 
10  week  period,  using  sources  from  the  open  literature  on  Link  16.  It  has  been  used  to 
develop  and  test  distributed  mission  training  simulators. 
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Acronyms 


bps 

Bits  per  second 

DIS 

Distributed  Interactive  Simulation 

DTS 

Data  Terminal  Set 

GCCS 

Global  Command  and  Control  System 

HLA 

High  Level  Architecture 

JREAP 

Joint  Range  Extension  Application  Protocol 

JTIDS 

Joint  Tactical  Information  Distribution  System 

LSB 

Least  Significant  Bit 

MSB 

Most  Significant  Bit 

MTC 

Multi-TADIL  Capability 

NATO 

North  Atlantic  Treaty  Organization 

PDU 

Protocol  Data  Unit 

PPLI 

Precise  Participant  Location  and  Identification 

QPSK 

Quadrature  Phased-Shift  Keying 

RPR-FOM 

Real-time  Platform  Reference  Federation  Object  Model 

SIMPLE 

Standard  Interface  for  Multiple  Platform  Link  Evaluation 

STANAG 

Standardisation  Agreement  (NATO) 

TADIL 

Tactical  Digital  Information  Link 

TCP 

Transmission  Control  Protocol 

TDL 

Tactical  Data  Link 

TDMA 

Time  Division  Multiple  Access 

UDP 

User  Datagram  Protocol 
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1.  Introduction 


Tactical  Data  Links  (TDLs)  enable  the  military  to  exchange  tactical  information  in  a  precise, 
efficient  and  timely  manner.  They  complement,  and  in  many  instances  substitute,  traditional 
voice-based  communication  bearers  such  as  VHP  radio.  Major  military  platforms  operated  by 
the  Australian  Defence  Force  are  either  equipped,  or  are  being  equipped  with  TDL  systems. 
Concurrent  with  real-world  adoption,  training  simulators  are  being  fitted  with  simulated 
tactical  data  links. 

This  technical  note  describes  the  development  of  a  Link  16  message  dissector  for  the 
Wireshark  network  protocol  analyser.  Wireshark  is  a  freely-available  open-source  protocol 
analyser  that  is  an  industry  standard  tool  for  network  protocol  troubleshooting.  The  dissector 
supports  analysis  of  J-series  messages  adhering  to  the  Simulation  Interoperability  Standards 
Organization's  Standard  for  Link  16  Simulations.  While  existing  Link  16  test  tools  are  available, 
they  are  more  suited  to  non-simulated  data  link  operations,  where  quality  assurance  and 
safety  are  paramount.  The  cost  and  thus  availability  of  these  dedicated  test  tools  make  them 
less  desirable  for  use  with  simulators. 

Development  of  the  dissector  was  completed  as  a  summer  vacation  student  project  over  a  10 
week  period  during  2009-2010,  using  sources  from  the  open  literature  on  Link  16.  No  export 
controlled  technical  data  was  used  in  the  production  of  this  technical  note. 

2.  Link  16 


Link  16  is  a  United  States  and  North  Atlantic  Treaty  Organization  (NATO)  tactical  data  link 
standard  that  defines  the  message  format,  methods  of  radio  transmission,  and  network 
management  procedures  i.  It  is  the  current  data  link  system  operated  by  the  United  States, 
NATO  members  and  allied  countries.  Development  commenced  in  1975  [1],  with  systems 
fielded  by  the  United  States  Air  Force  and  Navy  in  the  early  1990s  [2]. 

Link  16  may  also  be  referred  to  as  the  Joint  Tactical  Information  Distribution  System  (JTIDS), 
which  is  the  name  assigned  to  the  original  project  and  first-generation  terminal,  or  more 
simply  Tactical  Digital  Information  Link  J  (TADIL-J). 

2.1  J-series  Message  Format 

Tactical  data  link  messages  are  the  units  of  information  exchanged  between  the  participants  of 
a  tactical  data  link  network.  Link  16  supports  the  exchange  of  fixed  formatted  messages,  more 
commonly  referred  to  as  J-series  messages,  to  convey  information.  There  are  over  70  messages 
defined  [3]. 


1  Link  16  is  defined  by  several  standards  including  MIL-STD-6016  Tactical  Data  Link  16  Message  Standard 
and  STANAG-5516  Tactical  Data  Exchange  -  Link  16;  STANAG  4175  Technical  Characteristics  of  the 
Multifunctional  Information  Distribution  System;  and  US  CJCSM  6120.01  Joint  Multi-TADIL  Operating 
Procedures  and  NATO-ADATP-16  Standard  Operating  Procedures  for  NATO  Link  16.  These  standards  are 
not  published  in  the  open  literature  and  were  not  used  in  the  production  of  this  technical  note. 
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Each  J-series  message  comprises  an  initial  word,  followed  by  extension  word(s)  and  optional 
continuation  words.  Each  word  is  75  bits  long,  containing  70  bits  of  data  and  5  bits  parity.  An 
example  of  the  initial  word  layout  is  shown  in  Eigure  1. 

Messages  are  identified  by  a  label  and  sub-label.  Eor  example,  label  2,  sub-label  2,  identified  in 
shorthand  as  J2.2,  conveys  the  Precise  Participant  Location  and  Identification  (PPLI)  of  an  air 
platform.  This  message  is  published  on  the  network  to  advise  other  interested  participants  of 
an  air  platform's  location  and  identifying  information.  United  States  Department  of  Defense 
MIL-STD-6016  and  NATO  Standardisation  Agreement  (STANAG)  5516  define  how  the 
information  is  stored  and  retrieved  from  the  75-bit  words,  and  rules  governing  the  issuance 
and  receipt  of  those  words. 
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Figure  1:  Example  J-series  Initial  Word  (reproduced  from  [4],  §5.2.1).  The  dashed  area  concerns 
message  specific  information. 


2.2  Distribution  System 

When  operating  within  line  of  sight  of  one  another,  the  participants  of  a  Link  16  network 
exchange  messages  using  frequency  hopping  Time  Division  Multiple  Access  (TDMA) 
transceiver  terminals  operating  in  the  UHE  Lx  radar  band  (960  - 1215  MHz).  The  distribution 
system  provides  resistance  against  electronic  countermeasures  whilst  maintaining  security 
and  integrity  of  the  message  content.  Network  throughput  is  28800,  57600  or  115200  bps 
depending  on  the  required  level  of  electronic  countermeasure  protection. 

Where  there  is  a  need  to  exchange  messages  beyond  line  of  sight,  as  is  the  case  with 
distributed  mission  training  exercises,  protocols  exist  that  allow  for  the  data  link  messages  to 
be  exchanged  over  satellite  or  fixed-line  networks.  These  protocols  are  sometimes  referred  to 
as  wrappers,  as  their  primary  task  is  to  encapsulate  J-series  messages  in  a  format  suitable  for 
transmission  over  alternate  media  [5].  A  list  of  frequently  used  beyond  line  of  sight 
distribution  protocols  is  given  below: 

•  United  States  Department  of  Defense  MIL-STD-3011  Joint  Range  Extension  Application  Protocol 
(JREAP).  JREAP  is  the  military  standard  protocol  for  exchanging  messages  beyond  line  of 
sight  over  satellite,  serial  line  or  Internet  Protocol  [6]. 
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•  NATO  STANAG  5602  Standard  Interface  for  Multiple  Platform  Link  Evaluation  (SIMPLE)  [7] . 
SIMPLE  was  developed  by  the  NATO  Tactical  Data  Link  Interoperability  Test  Syndicate 
to  support  interoperability  testing  between  development  laboratories.  The  protocol  may 
be  operated  over  serial  line  or  Internet  Protocol. 

•  Simulation  Interoperability  Standards  Organization  SISO-STD-002  Standard  for  Link  16 
Simulations  [8].  Also  known  as  SISO-J,  this  protocol  was  developed  by  the  simulation 
community  to  address  the  needs  of  training  and  research  simulations.  SISO-J  is  an 
extension  of  the  Distributed  Interactive  Simulation  (DIS)  application  protocol,  and  High 
Level  Architecture  (HLA)  Real-time  Platform  Reference  Pederation  Object  Model  (RPR- 
EOM).  It  encapsulates  J-series  messages  inside  the  DIS  Transmitter  and  Signal  Protocol 
Data  Units  (PDUs)  or  RPR-EOM  equivalents,  allowing  line  of  sight,  signal  propagation 
and  interference  to  be  modelled  within  the  simulation.  The  standard  defines  optional  rules 
for  modelling  the  characteristics  of  the  TDMA  network. 

•  Global  Command  and  Control  System  (GCCS)  Multi  TADIL  Capability  (MTC).  The  MTC 
protocol  was  developed  initially  for  exchanging  J-series  messages  with  GCCS  software  [9], 
but  has  been  since  adopted  by  other  systems.  Whereas  the  other  distribution  protocols 
listed  here  employ  detailed  encapsulation  headers  and  issuance  and  receipt  rules,  the 
MTC  protocol  uses  minimalist  headers.  It  may  be  operated  over  serial  line  or  Internet 
Protocol,  and  is  referred  to  informally  as  Serial-J  or  Socket-J. 

Of  the  above  protocols,  only  SIMPLE  and  SISO-J  have  been  published  in  the  open  literature. 

JREAP  protocol  data  structures  are  described  in  [10],  but  the  issuance  and  receipt  rules  are 

omitted. 


3.  Link  11/  IIB 


Link  16  complements  an  earlier  generation  TDL  standard  known  as  Link  11.  Development  of 
Link  11  commenced  in  1954,  with  sea  trials  undertaken  in  the  1960s.  The  airborne  and 
maritime  variant  of  Link  11  is  also  known  as  TADIL-A,  and  the  variant  intended  for  point  to 
point  links  is  known  as  Link  IIB,  or  TADIL-B  [2].  Link  11  is  governed  by  several  standards 
that  define  the  message  format,  method  of  signal  modulation,  and  procedures  for  network 
management^.  Although  Link  11  is  not  the  focus  of  our  work,  appreciating  the  similarities 
between  it  and  Link  16  provides  for  meaningful  discussion  later  in  this  technical  note. 


2  Link  11  is  defined  by  several  standards  including  MIL-STD-188-203-1  Interoperability  and  Performance 
Requirements  for  TADIL-A  and  MIL-STD-188-203-2  Subsystem  Design  and  Engineering  Standards  for 
TADIL-B;  MIL-STD-6011  Tactical  Data  Link  11/llB  Message  Standard  and  STANAG-5511  Tactical  Data 
Exchange  -  Link  11/Link  IIB;  and  NATO-ADATP-11  Standard  Operating  Procedures  for  NATO  Link  11/Link 
IIB.  With  the  exception  of  MIL-STD-188-203-1  and  MIL-STD-188-203-2,  these  standards  are  not 
published  in  the  open  literature. 
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3.1  M-series  Message  Format 

Link  11  M-series  messages  are  transmitted  as  two  30  bit  frames,  with  each  frame  containing  24 
bits  of  data,  and  6  bits  for  forward  error  correction.  Messages  are  identified  by  a  4-bit  label. 
United  States  Department  of  Defense  MIL-STD-6011  and  NATO  STANAG  5511  describe  how 
information  is  stored  and  retrieved  from  the  30  bit  frames.  An  example  of  the  message  layout 
is  shown  in  Figure  2. 

MSB  LSB 


Figure  2:  Example  M-series  message  (reproduced  from  [11],  §2.1).  The  dashed  area  concerns  message 
specific  information. 


3.2  Distribution  System 

Link  11  messages  are  modulated  using  Quadrature  Phased-Shift  Keying  (QPSK)  and 
exchanged  over  half-duplex  HE  or  UHF  radio.  The  modulator/ demodulator  is  known  as  the 
Data  Terminal  Set  (DTS).  Security  is  achieved  by  encrypting  the  digital  message  stream  prior 
to  modulation.  The  system  supports  two  data  rates:  2250  bps  (fast)  and  1364  bps  (slow)  [2]. 

Link  IIB  messages  are  transmitted  over  point  to  point  radio  links,  such  as  microwave  or 
satellite. 

Protocols  to  distribute  Link  11  messages  beyond  radio  coverage  include: 

•  The  plain  old  telephone  system.  To  achieve  point-to-point  connectivity,  the  radio  transceiver 
is  replaced  with  a  standard  telephone  line. 

•  TADIL-B  over  Internet  Protocol.  The  TADIL-B  transmission  frame  format  [12]  can  be 
exchanged  over  serial  line  or  Internet  Protocol. 

•  NATO  STANAG  5602  Standard  Interface  for  Multiple  Platform  Link  Evaluation  (SIMPLE). 
Refer  to  the  previous  description  of  SIMPLE  in  section  2.2. 

•  SISO-STD-005  Standard  for  Link  11/llB  Simulation  [13].  Currently  in  draft  form,  this 
standard  encapsulates  M-series  messages  within  the  DIS  Transmitter  and  Signal  PDUs  (or 
RPR-FOM  equivalents) .  The  performance  characteristics  of  the  network  may  be  optionally 
modelled. 
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Wireshark,  previously  named  Ethereal,  is  an  open-source  network  protocol  analyser.  It 
provides  a  comprehensive  filtering  and  query  system,  utilities  for  performing  statistical 
analysis,  and  dissector  modules  to  decode  and  inspect  protocol  content.  A  graphical  and  text¬ 
mode  (known  as  tshark)  user  interface  is  provided  [14].  Wireshark  uses  the  libpcap  library  [15] 
(or  WinPcap  libraries  for  Microsoft  Windows)  to  capture  Ethernet  frames  directly  from  a 
computer's  network  interface  adaptor. 

Dissectors  are  modules  that  exist  within  Wireshark  to  decode  specific  network  protocols  and 
present  the  information  in  a  human-readable  format.  A  diverse  range  of  dissectors  is  included 
with  Wireshark,  such  as  Ethernet,  Internet  Protocol,  Transmission  Control  Protocol  (TCP)  and 
User  Datagram  Protocol  (UDP)  and  over  1000  other  protocols.  Wireshark  includes  routines  for 
dissecting  DIS  PDUs.  However  at  the  time  of  the  student  project  only  the  most  common  of 
PDU  types  were  supported:  Entity  State,  Eire  and  Detonation  PDUs.  Since  then  other 
developers  have  expanded  the  DIS  dissector  to  support  many  more  PDUs  from  the 
Distributed  Emission  Regeneration,  Radio  Communication  and  Simulation  Management 
families. 

Wireshark  was  chosen  as  a  foundation  for  this  student  project  for  the  following  reasons: 

•  Industry  standard.  Wireshark  is  an  industry  standard  tool  for  network  protocol 
troubleshooting.  Any  effort  spent  improving  Wireshark  is  likely  to  benefit  its  other  users. 

•  Familiarity.  Eor  distributed  simulation  exercises,  staff  at  DSTO  already  use  Wireshark  to 
diagnose  faults  and  capture  packets  in  simulation  exercises.  Where  practical  the  libpcap 
file  format  is  used  to  archive  exercise  recordings. 

•  Heritage.  Wireshark  has  been  under  development  since  1998.  Infrastructure  to  decode  byte 
sequences,  display  information,  and  manage  configuration  files  has  been  previously  built 
and  thoroughly  tested. 

•  Portability.  Wireshark  is  written  in  the  C89  programming  language  and  runs  on  Linux, 
Mac  OS  X,  BSD,  Solaris  and  Microsoft  Windows  operating  systems. 

•  Active  open-source  project.  The  software  is  distributed  using  the  GNU  General  Public 
License,  and  is  supported  by  an  active  developer  and  user  community.  The  project 
features  a  high  volume  email  reflector  (averaging  11, 11  and  7  messages  per  day  over  2010, 
2011  and  2012  respectively  [16]),  library  of  reference  packet  capture  files,  regression  testing 
system  and  issue  tracker. 


UNCLASSIPIED 


5 


DSTO-TN-1257 


UNCLASSIFIED 


5.  Requirements 

Requirements  for  the  student  project  were  defined  as  follows. 

1.  Modify  the  existing  DIS  dissector  to  decode  Signal  PDUs  and  SISO-J  headers  and 
display  content  of  fields,  performing  enumeration  lookups  where  necessary. 

2.  Support  dissection  of  J-series  messages;  display  the  label  and  sub-label  of  each 
message. 

3.  Ensure  the  Link  16  routines  are  sufficiently  modular,  allowing  them  to  be  reused  by 
other  protocol  dissectors  (such  as  a  hypothetical  JREAP  or  MTC  dissector).  An 
experimental  SIMPLE  protocol  dissector,  developed  some  years  earlier  by  DSTO, 
provides  a  use  case  for  this  requirement. 

4.  Support  filtering  of  messages  such  that  search  queries  can  be  answered.  Eor  example 
'display  all  packets  containing  the  J2.2  message.' 

5.  Document  all  material  used  in  the  development  of  the  dissector  to  allow  auditing  of 
the  source  code. 

6.  Reuse  or  adapt  existing  Wireshark  routines  where  possible. 

7.  Produce  a  working  software  patch  that  can  be  applied  to  a  known  version  of 
Wireshark. 


6.  Development 

The  modifications  to  Wireshark  were  developed  over  several  weeks  in  2010.  They  were 
revised  in  2013  in  order  to  be  compatible  with  Wireshark  vl.11.0  (the  current  version  at  time 
of  publication). 

6.1  Environment 

An  appropriate  build  environment  was  needed  to  begin  programming  of  the  dissector.  As  the 
primary  development  computer  was  a  Linux  system  (Ubuntu  Linux  9.10  and  12.10),  this  was 
achieved  by  running  the  included  configure  shell  script  and  the  required  dependencies  via  the 
Linux  package  manager. 

6.2  Implementation 

It  was  necessary  to  become  familiar  with  the  design  and  internal  workings  of  Wireshark  and 
its  existing  DIS  dissector.  There  were  plenty  of  development  resources  available  on  the 
Internet;  a  particularly  useful  resource  was  an  article  in  The  Code  Project  on  writing  a  new 
dissector  [17].  A  review  of  the  existing  Wireshark  DIS  dissector  found  it  to  use  a  custom 
system  for  parsing  DIS  PDUs.  Given  a  description  of  a  DIS  PDU  or  Record,  the  parsing  system 
would  automatically  extract  the  appropriate  bytes  from  the  PDU,  perform  endian  conversion, 
and  register  fields  with  Wireshark's  filtering  and  query  system.  This  approach  was  found  to 
be  unique  compared  to  other  existing  protocol  dissectors. 

The  task  of  extending  Wireshark  to  support  Link  16  was  broken  into  three  main  activities: 
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1.  Write  a  new  Link  16  dissector  module  that  decodes  J-series  message  words. 

2.  Modify  the  existing  DIS  dissector  to  process  SISO-J  Signal  PDUs. 

3.  Modify  an  experimental  SIMPLE  dissector  to  use  the  new  Link  16  dissector. 

Logic  to  detect  SISO-J  headers  was  added  to  the  Signal  PDU  processor  of  the  DIS  dissector. 
When  detected,  the  relevant  headers  are  decoded,  and  the  Link  16  J-series  messages  are 
handed  off  individually  to  the  Link  16  dissector.  By  separating  the  Link  16  J-series  message 
dissector  from  the  DIS  dissector,  the  requirement  for  a  modular  system  was  fulfilled. 

Distribution  protocols  were  each  found  to  format  J-series  message  words  differently  for 
transmission.  The  SIMPLE  protocol  stores  each  word  as  a  80-bit  little  endian  word,  whereas 
the  SISO-J  Signal  PDU  stores  them  as  a  series  of  three  interleaved  big  endian  32-bit  words  [18] . 
JREAP  and  MTC  may  use  different  formatting  again.  It  was  therefore  necessary  to  make  the 
Link  16  dissector  agnostic  to  the  underlying  transmission  format.  This  was  achieved  by 
normalising  the  format  accepted  by  the  Link  16  dissector  module,  and  making  the  SISO-J  and 
SIMPLE  dissectors  responsible  for  converting  between  the  transmission  and  normalised 
format  (80-bit  little  endian  was  chosen  as  the  normalised  format). 

Because  only  the  initial  word  of  a  J-series  message  contains  the  label  and  sublabel  identifiers, 
and  subsequent  extension  and  continuation  messages  rely  on  that  information,  it  was  also 
necessary  to  store  these  values  within  the  context  of  the  dissector.  This  enabled  subsequent 
words  within  the  message  to  be  identified  correctly. 

6.3  Testing 

The  modified  Wireshark  has  been  evaluated  against  the  example  J2.2  Air  PPLI  message 
defined  in  the  SISO-J  standard  (refer  to  Appendix  A),  and  data  generated  by  third-party  SISO- 
J  capable  equipment.  Significant  observations  from  the  test  phase  are  given  below. 

Using  the  built  in  Wireshark  tool  fuzz-test. sh,  more  than  2000  iterations  of  fuzzed  capture  files 
were  fed  into  the  dissectors  to  test  for  its  ability  to  handle  corrupted  packets.  The  test  was 
completed  with  no  errors  encountered.  This  was  done  to  gain  confidence  that  the  dissector 
would  not  crash  when  subjected  to  invalid  data.  As  a  troubleshooting  tool,  it  must  be  able  to 
cope  with  malformed  DIS  PDUs  and  J-series  messages. 

The  software  was  tested  on  Ubuntu  Linux  12.10  (on  both  i386  and  64  bit  PowerPC  hardware), 
Debian  6.06  (SPARC64)  and  Windows  Server  2003  R2  (i386)  operating  systems  -  providing 
coverage  of  32  bit,  64  bit,  little  endian  and  big  endian  environments.  Two  faults  were  found 
during  this  testing;  these  have  since  been  corrected. 

1.  Initially  Link  16  words  were  not  being  decoded  correctly.  This  was  due  to 
misinterpretation  of  the  method  SISO-J  used  to  store  J-series  messages. 

2.  Output  from  the  text-mode  tshark  program  did  not  match  the  output  from  the  Wireshark 
graphical  user  interface  -  the  data  in  the  information  column  was  not  being  updated. 
Moving  the  code  that  handled  this  to  outside  the  if  (tree)  { ...  }  section  allowed  tshark  to 
function  properly. 
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6.4  Development  Observations 

Through  the  development  of  the  dissector  it  became  apparent  that  it  is  very  important  to  be 
working  with  up  to  date  materials.  Although  the  latest  published  version  of  the  SISO-J 
standard  document  was  being  used,  a  draft  revision  of  the  standard  gave  useful  examples  of 
the  byte  swapping  operations  required  to  decode  the  Link  16  messages. 

Software  development  began  using  an  older  version  of  the  Wireshark  source  code.  Changes 
were  being  made  to  the  DIS  dissector  upstream^  and  halfway  through  the  development 
process  it  was  necessary  to  merge  these  changes  (some  of  which  were  overlapping  with 
updates  that  had  been  made  in  the  local  repository). 

6.5  Software  Patch 

In  accordance  with  the  Wireshark  development  guidelines  [19],  a  source  code  patch  against 
the  current  version  of  Wireshark  was  made.  Three  patch  files  were  created,  one  to  introduce 
the  Link-16  dissector,  and  another  to  add  SISO-J  header  parsing  to  the  existing  DIS  dissector. 
A  third  patch  addresses  typographic  errors  found  in  the  existing  DIS  dissector.  Refer  to 
Appendix  B  for  the  source  code  patch. 

7.  Conclusion  and  Further  Work 


The  Wireshark  network  protocol  analyser  has  been  extended  to  support  analysis  of  tactical 
data  link  messages.  This  work  was  done  as  a  summer  vacation  student  project.  The  extended 
version  of  Wireshark  has  been  evaluated  against  several  sources  of  J-series  messages  and 
demonstrated  publically  [20].  It  has  been  used  to  support  the  development  and  testing  of 
distributed  mission  training  simulators. 

There  are  several  ways  in  which  this  work  could  be  furthered.  The  authors'  suggestions  are 
given  below. 

Develop  a  more  comprehensive  J-series  message  dissector.  The  dissector  presented  in  this  work  only 
decodes  the  label  and  sub-label  fields.  While  this  is  sufficient  for  superficial  analysis  of  Link  16 
networks,  there  are  many  fields  within  the  J-series  messages  (such  as  track  and  coordinate 
numbers)  that  would  make  the  dissector  more  useful  for  troubleshooting  faults. 

Support  dissection  of  other  distribution  protocols.  Wireshark  could  be  further  extended  to  dissect 
the  JREAP  and  MTC  protocols. 

Develop  a  Link  11  dissector.  Using  the  approach  described  in  this  technical  note,  one  could 
develop  a  SISO-STD-005  protocol  dissector  and  complementary  M-series  message  dissector. 


3  In  this  context,  upstream  refers  to  changes  made  to  the  official  Wireshark  project. 
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Visualisation  and  statistical  utilities  In  addition  to  analysing  packets,  Wireshark  includes  utilities 
to  visualise  and  gather  statistics  on  particular  protocols.  There  are  potentially  use  cases  where 
visualisation  or  presentation  of  the  statistics  of  the  link  network  would  assist  with  fault 
diagnosis. 
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Appendix  A:  Reference  Capture  File 

An  exemplar  DIS  Signal  PDU  containing  J-series  messages  is  described  by  SISO-STD-002 
Annex  B.  Ethernet,  IP  and  UDP  headers  were  added  to  this  PDU  to  create  a  reference  capture 
file  compatible  with  Wireshark.  The  reference  file  is  shown  at  Eigure  B1  and  dissected  output 
is  shown  at  Eigures  B2,  B3  and  B4. 


Figure  Bl:  Input  file  (uuencoded) 


Figure  B2:  Dissector  output  using  tshark 


%  tshark  -r  siso_stcl_002_annex_b_example  .pcap  —V 

Frame  1:  130  bytes  on  wire  (1040  bits),  130  bytes  captured  (1040  bits) 

Encapsulation  type;  Ethernet  (1) 

Arrival  Time;  Jan  1,  1970  10 ; 00 ; 00 . 000000000  EST 
[Time  shift  for  this  packet;  0.000000000  seconds] 

Epoch  Time;  0.000000000  seconds 

[Time  delta  from  previous  captured  frame;  0.000000000  seconds] 

[Time  delta  from  previous  displayed  frame;  0.000000000  seconds] 

[Time  since  reference  or  first  frame;  0.000000000  seconds] 

Frame  Number;  1 

Frame  Length;  130  bytes  (1040  bits) 

Capture  Length;  130  bytes  (1040  bits) 

[Frame  is  marked;  False] 

[Frame  is  ignored;  False] 

[Protocols  in  frame;  eth ; ip ; udp ; dis ; linkl 6 ; linkl 6 ; linkl 6 ] 

Ethernet  11,  Src;  00 ; 00 ; 00_00 ; 00 ; 00  ( 00  ;  00  ;  00  ;  00 ; 00 ; 00 ) ,  Dst;  lPv4mcast_01 ; 01 ; 01 

(01;00;5e;01;01;01) 

Destination;  lPv4mcast_01 ; 01 ; 01  ( 01 ; 00 ; 5e ; 01 ;  01 ;  01 ) 

Address;  lPv4mcast_01 ; 01 ; 01  ( 01 ; 00 ; 5e ; 01 ; 01 ; 01 ) 

. 0 . =  LG  bit;  Globally  unique  address  (factory  default) 

. 1 . =  IG  bit;  Group  address  (multicast/broadcast) 

Source;  00 ; 00 ; 00_00 ; 00 ; 00  ( 00 ; 00 ; 00 ; 00 ; 00 ; 00 ) 

Address;  00 ; 00 ; 00_00 ; 00 ; 00  ( 00 ; 00 ; 00 ; 00 ; 00 ; 00 ) 

. 0 . =  LG  bit;  Globally  unique  address  (factory  default) 

. 0 . =  IG  bit;  Individual  address  (unicast) 

Type;  IP  (0x0800) 

Internet  Protocol  Version  4,  Src;  192.168.1.1  (192.168.1.1),  Dst;  224.1.1.1  (224.1.1.1) 
Version;  4 

Header  Length;  20  bytes 

Differentiated  Services  Field;  0x00  (DSCP  0x00;  Default;  ECN;  0x00;  Not-ECT  (Not  ECN- 
Capable  Transport) ) 

0000  00..  =  Differentiated  Services  Codepoint;  Default  (0x00) 

. 00  =  Explicit  Congestion  Notification;  Not-ECT  (Not  ECN-Capable  Transport) 

(0x00) 

Total  Length;  116 
Identification;  0x08cl  (2241) 

Flags;  0x00 
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0 . =  Reserved  bit:  Not  set 

.0 . =  Don't  fragment:  Not  set 

..0 . =  More  fragments:  Not  set 

Fragment  offset:  0 
Time  to  live:  128 
Protocol:  UDP  (17) 

Header  checksum:  OxSfOc  [correct] 

[Good:  True] 

[Bad:  False] 

Source:  192.168.1.1  (192.168.1.1) 

Destination:  224.1.1.1  (224.1.1.1) 

User  Datagram  Protocol,  Src  Port:  remoteware-cl  (3000),  Dst  Port:  remoteware-cl  (3000) 
Source  Port:  remoteware-cl  (3000) 

Destination  Port:  remoteware-cl  (3000) 

Length:  96 

Checksum:  Oxdabe  [validation  disabled] 

[Good  Checksum:  False] 

[Bad  Checksum:  False] 

Distributed  Interactive  Simulation 
Header 

Proto  version:  IEEE  1278.1A-1998  (6) 

Excercise  ID:  1 
PDU  type:  Signal  (26) 

Proto  Family:  Radio  communications  (4) 

Timestamp  =  00:00  000  relative 

PDU  Length:  88 

Explicit  Padding  (2  bytes) 

Signal  PDU 

Entity  ID 

Entity  ID  Site:  48 
Entity  ID  Application:  1 
Entity  ID  Entity:  1 
Radio  ID:  1 

Encoding  Scheme:  0x4003 

01 . =  Encoding  Class:  Raw  Binary  Data  (1) 

..00  0000  0000  0011  =  Encoding  Type:  3 
TDL  Type:  Link  16  Standardized  Format  ( JTIDS/MIDS/TADIL  J)  (100) 

Sample  Rate:  0 
Data  Length:  448 
Number  of  Samples:  0 
Link  16  Network  Header 

NPG  Number:  PPLI  and  Status  (6) 

Network  Number  =  0 

TSEC  CVLL:  NO  STATEMENT  (255) 

MSEC  CVLL:  NO  STATEMENT  (255) 

Message  Type:  JTIDS  Header/Messages  (0) 

Padding  =  0 
Time  Slot  ID  =  0 

Perceived  Transmit  Time:  NO  STATEMENT 
Link  16  Message  Data:  JTIDS  Header/Messages 
Time  Slot  Type:  0 
Relay  Transmission  Indicator:  0 
Source  Track  Number:  Oil 
Secure  Data  Unit  Serial  Number:  0 
Link  16  J2.2I  Air  PPLI 

Word  Format:  Initial  Word  (0) 

Label:  Precise  Participant  Location  and  Identif icaton  (2) 

Sublabel:  2 

Message  Length  Indicator:  2 
Link  16  J2.2E0  Air  PPLI 

Word  Format:  Extension  Word  (2) 

Link  16  J2.2C1  Air  PPLI 

Word  Format:  Continuation  Word  (1) 

Continuation  Word  Label:  1 


Figure  B3:  Dissector  output  using  tshark  (with  packet  details) 
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siso.$td.002.ann«x.b_exampl«.|>up  [Wir«shark1.11X  (SVN  Rev  Unknown  from  unknown)) 
File  Edit  View  Go  Capture  Analyze  Statistics  Telephony  Tools  Internals  Help 


e  ®  £ 


,□  I  8IH  H)^  ii 


Filter  |dis.radio.tdl_type  =  100 


Destination 


Expression...  Clear  ^noi^^^av^  — 
Protocol  Length  Info 


138  PDUType:  Signal,  RadioID=l,  STN=eil,  Link  15  Words:  J2.2I  J2.2Ee  J2.2C1 


►  User  Datagram  Protocol,  Src  Port:  remoteware-cl  (3809),  Dst  Port:  remoteware-cl  (3909) 
Distributed  Interactive  Simulation 
>  Header 
▼  Signal  PDU 
►  Entity  ID 
Radio  ID:  1 

▼  Encoding  Scheme:  0x4003 

01 . =  Encoding  Class:  Raw  Binary  Data  (1) 

..00  0060  6090  6011  =  Encoding  Type:  3 
TDL  Type:  Link  16  Standardized  Format  {JTIDS/HIDS/TADIL  J)  (169) 

Sample  Rate:  6 
Data  Length:  448 
Number  of  Samples:  6 

▼  Link  16  Network  Header 


NPG  Number:  PPLI  and  Status  (6) 

Network  Number  =  0 

TSEC  CVLL:  NO  STATEMENT  (255) 

MSEC  CVLL:  NO  STATEMENT  (255) 

Message  Type:  JTIDS  Header/Messages  (9) 

Padding  =  6 
Time  Slot  ID  =  0 

Perceived  Transmit  Time:  NO  STATEMENT 

Time  Slot  Type:  0 
Relay  Transmission  Indicator:  6 
Source  Track  Number:  611 
Secure  Data  Unit  Serial  Number:  0 
•  Link  16  32.21  Air  PPLI 

Word  Format:  initial  Word  (0) 

Label:  Precise  Participant  Location  and  Identificaton  (2) 
Sublabel:  2 

Message  Length  Indicator:  2 


6616 

{6926 

0636 

0646 

10956 

0066 

0070 


I  Se  61  61  61  60 

I  66  86  11 


66  45  60 
8f  6c  c6  a8  61  61  eO  61 


01  91  9b  b8  6b  b8  00  60  da  be  ■  61  la  64  66  6 

■  66  69  58  66  66  66  36  66  61  ^  01  60  61  40  0] 

B  64  66  60  60  60  61  cB  66  66  60  68  60  ff  ff  6 

■  66  66  66  60  66  ff  ff  ff  ff  ff  ff  ff.ff^KT 

...... j 

.d . q 

Frame  (130  bytes)  Link  16 Word  (10  bytes)  Link  16Word  (10  bytes)  Link  16 Word  (10  bytes) 
O  T®xi  rtsm  (text).  36  bytes  ...  Profile:  Default 


Figure  B4:  Dissector  output  using  Wireshark  graphical  user  interface 
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Appendix  B:  Software  Patch 


The  modifications  made  against  Wireshark  vl.11.0  are  shown  at  Figures  Al,  A2  and  A3. 


From  0f9b0c80580700cc4cf06f91b61cfe8b3b31fa6d  Mon  Sep  17  00:00:00  2001 
From:  Peter  Ross  <peter . ross@dsto . defence . gov. au> 

Date:  Wed,  16  Oct  2013  10:00:01  +1100 

Subject:  [PATCH  1/3]  packet-linkl 6 :  Link  16  message  dissector  (MlL-STD-6016) 


epan/CMakeLists . txt  I  1  + 

epan/dissectors/Makef lie . common  |  1  + 

epan/dissectors/packet-linkl6 . c  I  276  +++++++++++++++++++++++++++++++++++++++ 
epan/dissectors/packet-linkl6 .h  |  34  +++++ 

4  files  changed,  312  insertions (+) 

create  mode  100644  epan/dissectors/packet-linkl6 . c 
create  mode  100644  epan/dissectors/packet-linkl6 .h 

diff  --git  a/epan/CMakeLists . txt  b/epan/CMakeLists . txt 
index  9baeaa4 . . c8f 54fa  100644 

-  a/epan/CMakeLists . txt 

+++  b/epan/CMakeLists . txt 
@@  -843,6  +843,7  @@  set (D1SSECT0R_SRC 
dis sectors /packet- Idp . c 
dissectors/packet-ldss . c 
dissectors/packet-lge_monitor . c 
+  dissectors/packet-linkl6 . c 

dis sectors /packet- linx . c 
dis sectors /packet- lisp-data . c 
dis sectors /packet- lisp . c 

diff  --git  a/epan/dissectors/Makef lie . common  b/epan/dissectors/Makef lie . common 
index  ae9831b . . bad899e  100644 

-  a/epan/dissectors/Makef lie . common 

+++  b/epan/dissectors/Makef lie . common 
@@  -772,6  +772,7  @@  D1SSECT0R_SRC  =  \ 


packet-ldp.c  \ 

packet-ldss . c  \ 

packet-lge_monitor . c  \ 

+  packet-linkl 6 . c  \ 

packet-linx . c  \ 

packet-lisp-data . c  \ 

packet-lisp . c  \ 


diff  --git  a/epan/dissectors/packet-linkl6 . c  b/epan/dissectors/packet-linkl6 . c 
new  file  mode  100644 
index  0000000 .. dbl31db 
-  /dev/null 

+++  b/epan/dissectors/packet-linkl6 . c 
@@  -0,0  +1,276  @@ 

+/*  packet-linkl 6 . c 

+  *  Routines  for  Link  16  message  dissection  (MlL-STD-6016) 

+  *  William  Robertson  <aliask@gmail . com> 

+  *  Peter  Ross  <peter . ross@dsto . defence . gov. au> 

+  * 

+  *  $ld$ 

+  * 

+  *  This  program  is  free  software;  you  can  redistribute  it  and/or 
+  *  modify  it  under  the  terms  of  the  GNU  General  Public  License 
+  *  as  published  by  the  Free  Software  Foundation;  either  version  2 
+  *  of  the  License,  or  (at  your  option)  any  later  version. 

+  * 

+  *  This  program  is  distributed  in  the  hope  that  it  will  be  useful, 

+  *  but  WITHOUT  ANY  WARRANTY;  without  even  the  implied  warranty  of 
+  *  MERCHANTABILITY  or  FITNESS  FOR  A  PARTICULAR  PURPOSE.  See  the 
+  *  GNU  General  Public  License  for  more  details. 

+  * 

+  *  You  should  have  received  a  copy  of  the  GNU  General  Public  License 
+  *  along  with  this  program;  if  not,  write  to  the  Free  Software 
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+  *  Foundation,  Inc.,  51  Franklin  Street,  Fifth  Floor,  Boston,  MA  02110-1301  USA 
+  */ 

+ 

+#include  "config.h" 

+ 

+#include  <glib.h> 

+#include  <epan/packet.h> 

+#include  <epan/value_string.h> 

+#include  <string.h> 

+#include  "packet-linkl6 .h" 

+ 

+/*  Elmasry,  G.,  (2012),  Tactical  Wireless  Communications  and  Networks:  Design  Concepts  and 

Challenges,  Wiley,  ISBN  9781119951766.  */ 

+enum  { 


WORDFORMAT_INITIAL  =  0, 
WORDFORMAT_CONT INUAT I ON , 
WORDFORMAT_EXTENS I ON , 


+ 

+ 

+ 

+  }; 

+ 

+static  const  value_string  WordFormat_Strings [ ]  =  { 


{ 


WORDFORMAT_INITIAL,  "Initial  Word"  }, 
WORDFORMAT_CONTINUATION,  "Continuation  Word" 
WORDFORMAT_EXTENSION,  "Extension  Word"  }, 

0,  NULL  }, 


+ 

+ 

+ 

+ 

+  }; 

+ 

+/*  Viasat,  Inc.,  (2012),  Link  16  Network  Participant  Group  and  Message  Card,  accessed  from 
<http://www.viasat.eom/files/assets/assets/Linkl6_NPG_Message_Card_100112a.pdf>  on  15  April 
2013.  */ 

+static  const  value_string  Linkl6_Label_Strings [ ]  =  { 


0, 

1, 

2, 

3, 

5, 

6, 
7, 


{  9, 


"Network  Management"  }, 

"Network  Management"  }, 

"Precise  Participant  Location  and  Identif icaton" 
"Surveillance"  }, 

"Anti-submarine  Warfare"  } , 

"Intelligence"  }, 

"Information  Management"  }, 

"Information  Management"  }, 

"Weapons  Coordination  and  Management"  } , 


+  ( 

10, 

'Weapons  Coordination  and  Management"  }, 

+  ( 

11, 

'Weapons  Coordination  and  Management"  } , 

+  ( 

12, 

'Control"  }, 

+  ) 

13, 

'Platform  and  System  Status"  }, 

+  ) 

14, 

'Electronic  Warfare"  } , 

+  ( 

15, 

'Threat  Warning"  } , 

+  ( 

16, 

'Imagery"  }, 

+  ( 

17, 

'Weather"  }, 

+  ( 

28, 

'National  Use"  } , 

+  ) 

29, 

'National  Use"  } , 

+  ) 

30, 

'National  Use"  } , 

+  ( 

31, 

'Miscellaneous"  }, 

+  ( 
+  }; 

;  0,  NULL  }, 

+ 

+/*  Viasat, 

Inc.,  (2012),  Link  16  Network  Participant 

<http ; 

:  / /www 

.viasat . com/f iles/assets/assets/Linkl6  NPG 

2013. 

*/ 

+#define  MKPAIR(a,  1 

+static  const  value 

+ 

{  MKPAIR(0, 

0) 

+ 

{  MKPAIR(0, 

1) 

+ 

{  MKPAIR(0, 

2) 

+ 

{  MKPAIR(0, 

3) 

+ 

{  MKPAIR(0, 

4) 

+ 

{  MKPAIR(0, 

5) 

+ 

{  MKPAIR(0, 

6) 

+ 

{  MKPAIR(0, 

7) 

+ 

{  MKPAIR(1, 

0) 

+ 

{  MKPAIR(1, 

1) 

+ 

{  MKPAIR(1, 

2) 

+ 

{  MKPAIR(1, 

3) 

b)  (  (  (b)  «  5)  I  (a)  ) 

_string  Linkl 6_Message_String£ 
,  "Initial  Entry"  }, 

,  "Test"  }, 

,  "Network  Time  Update"  }, 

,  "Time  Slot  Assignment"  } , 

,  "Radio  Relay  Control"  }, 

,  "Repromulgation  Relay"  } , 

,  "Communication  Control"  }, 

,  "Time  Slot  Reallocation"  } , 

,  "Connectivity  Interrogation" 
,  "Connectivity  Status"  }, 

,  "Route  Establishment"  } , 

,  "Acknowledgment"  } , 


=  { 
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+  ( 

MKPAIR(1,  4), 

"Communication  Status"  }, 

+  ( 

MKPAIR(1,  5), 

"Net  Control  Initialization"  }, 

+  ( 

MKPAIR(1,  6), 

"Needline  Participation  Group  Assignment"  } , 

+  ( 

MKPAIR(2,  0), 

"Indirect  Interface  Unit  PPLI"  }, 

+  ( 

MKPAIR(2,  2), 

"Air  PPLI"  }, 

+  ( 

MKPAIR(2,  3), 

"Surface  PPLI"  }, 

+  ( 

MKPAIR(2,  4), 

"Subsurface  PPLI"  }, 

+  ( 

MKPAIR(2,  5), 

"Land  Point  PPLI"  }, 

+  ( 

MKPAIR(2,  6), 

"Land  Track  PPLI"  }, 

+  ( 

MKPAIR(3,  0), 

"Reference  Point"  } , 

+  ( 

MKPAIR(3,  1), 

"Emergency  Point"  } , 

+  ( 

MKPAIR(3,  2), 

"Air  Track"  } , 

+  ( 

MKPAIR(3,  3), 

"Surface  Track"  }, 

+  ( 

MKPAIR(3,  4), 

"Subsurface  Track"  }, 

+  ( 

MKPAIR(3,  5), 

"Land  Point  or  Track"  }, 

+  ( 

MKPAIR(3,  6), 

"Space  Track"  }, 

+  ( 

MKPAIR(3,  7), 

"Electronic  Warfare  Product  Information"  }, 

+  ( 

MKPAIR(5,  4), 

"Acoustic  Bearing  and  Range"  } , 

+  ( 

MKPAIR(6,  0), 

"Amplification"  } , 

+  ( 

MKPAIR(7,  0), 

"Track  Management"  } , 

+  ( 

MKPAIR(7,  1), 

"Data  Update  Request"  }, 

+  ( 

MKPAIR(7,  2), 

"Correlation"  } , 

+  ( 

MKPAIR(7,  3), 

"Pointer"  } , 

+  ( 

MKPAIR(7,  4), 

"Track  Identifier"  } , 

+  ( 

MKPAIR(7,  5), 

"IFF/SIF  Management"  }, 

+  ( 

MKPAIR(7,  6), 

"Filter  Management"  }, 

+  ( 

MKPAIR(7,  7), 

"Association"  } , 

+  ( 

MKPAIR(8,  0), 

"Unit  Designator"  } , 

+  ( 

MKPAIR(8,  1), 

"Mission  Correlator  Change"  } , 

+  ( 

MKPAIR(9,  0), 

"Command"  } , 

+  ( 

MKPAIR(10,  2), 

"Engagement  Status"  }, 

+  ( 

MKPAIR(10,  3), 

"Handover"  }, 

+  ( 

MKPAIR(10,  5), 

"Controlling  Unit  Report"  } , 

+  ( 

MKPAIR(10,  6), 

"Pairing"  } , 

+  ( 

MKPAIR(11,  0), 

"From  the  Weapon"  }, 

+  ( 

MKPAIR(11,  1), 

"To  the  Weapon"  } , 

+  ( 

MKPAIR(11,  2), 

"Weapon  Coordination"  } , 

+  ( 

MKPAIR(12,  0), 

"Mission  Assignment"  } , 

+  ( 

MKPAIR(12,  1), 

"Vector"  } , 

+  ( 

MKPAIR(12,  2), 

"Precision  Aircraft  Direction"  }, 

+  ( 

MKPAIR(12,  3), 

"Flight  Path"  }, 

+  ( 

MKPAIR(12,  4), 

"Controlling  Unit  Change"  } , 

+  ( 

MKPAIR(12,  5), 

"Target/Track  Correlation"  } , 

+  ( 

MKPAIR(12,  6), 

"Target  Sorting"  } , 

+  ( 

MKPAIR(12,  7), 

"Target  Bearing"  } , 

+  ( 

MKPAIR(13,  0), 

"Airfield  Status"  }, 

+  ( 

MKPAIR(13,  2), 

"Air  Platform  and  System  Status"  }, 

+  ( 

MKPAIR(13,  3), 

"Surface  Platform  and  System  Status"  }, 

+  ( 

MKPAIR(13,  4), 

"Subsurface  Platform  and  System  Status"  }, 

+  ( 

MKPAIR(13,  5), 

"Land  Platform  and  System  Status"  }, 

+  ( 

MKPAIR(14,  0), 

"Parametric  Information"  }, 

+  ) 

MKPAIR(14,  2), 

"Electronic  Warfare  Control  /  Coordination"  } , 

+  ( 

MKPAIR(15,  0), 

"Threat  Warning"  } , 

+  ( 

MKPAIR(16,  0), 

"Imagery"  }, 

+  ( 

MKPAIR(17,  0), 

"Weather  Over  target"  }, 

+  ( 

MKPAIR(28,  0), 

"U.S.  National  1  (Army)"  }, 

+  ( 

MKPAIR(28,  1), 

"U.S.  National  2  (Navy)"  }, 

+  ( 

MKPAIR{28,  2), 

"U.S.  National  3  (Air  Force)"  }, 

+  ( 

MKPAIR(28,  3), 

"U.S.  National  4  (Marine  Corps)"  }, 

+  ( 

MKPAIR(28,  4), 

"French  National  1"  }, 

+  ( 

MKPAIR(28,  5), 

"French  National  2"  }, 

+  ( 

MKPAIR(2  8,  6), 

"U.S.  National  5  (NSA) "  }, 

+  ( 

MKPAIR{28,  7), 

"UK  National"  }, 

+  ( 

MKPAIR(31,  0), 

"Over-the-Air  Rekeying  Management"  } , 

+  ( 

MKPAIR(31,  1), 

"Over-the-Air  Rekeying"  } , 

+  ( 

MKPAIR(31,  7), 

"No  Statement"  } , 

+  ( 
+  }; 

0,  NULL  }, 

+ 

+/*  Viasat,  Inc.,  (2012),  Link  16  Network  Participant  Group  and  Message  Card,  accessed  from 

1  <http : 

: / /www . viasat . com/f iles/assets/assets/Linkl 6  NPG  Message  Card  100112a. pdf>  on  15  April  | 
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2013. 
+const 
+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  { 

+  }; 

+ 

istatic 

+ 

istatic 

+ 

istatic 

istatic 

istatic 

istatic 

istatic 

+ 

istatic 

+ 

istatic 
+  { 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 


/ 


{ 


value_string  Linkl 6_NPG_Strings [ ]  = 

1,  "Initial  Entry"  }, 

RTT-A"  } , 

RTT-B"  } , 

Network  Management"  } , 

PPLI  and  Status"  }, 

PPLI  and  Status"  }, 

Surveillance"  }, 

Mission  Management/Weapons  Coordination" 
Control"  }, 

"Image  Transfer"  }, 

"Voice  A"  } , 

"Voice  B"  } , 

"Network  Enabled  Weapons"  }, 
"Figher-to-Fighter  A"  }, 
"Figher-to-Fighter  B"  }, 

"Engagement  Coordination"  } , 

"Joint  Net  PPLI"  }, 

"Distributed  Network  Management"  }, 

NULL  } , 


9,  ' 

11, 

12, 

13, 

18, 

19, 

20, 
21, 

27, 

28, 

0, 


int  proto_linkl6  =  -1; 

dissector_handle_t  linkl 6_handle; 

gint  hf_linkl 6_wordf ormat  =  -1; 
gint  hf_linkl 6_label  =  -1; 
gint  hf_linkl 6_sublabel  =  -1; 
gint  hf_linkl 6_mli  =  -1; 
gint  hf_linkl 6_contlabel  =  -1; 

gint  ett_linkl6  =  -1; 

void  dissect_linkl6 (tvbuff_t  *tvb,  packet_info  *pinfo,  proto_tree 


proto_item  *linkl6_item  =  NULL; 
proto_tree  *linkl6_tree  =  NULL; 
guint32  cache; 

guintS  wordformat,  contlabel,  mli; 


state  =  (LinklOState* ) pinfo->private_data; 

16  dissector  state  missing"); 


LinklOState  * 
if  (  ! state)  { 

REPORT_DISSECTOR_BUC ("Link 

} 


cache  =  tvb_get_letohl (tvb, 
wordformat  =  cache  &  0x3; 


0)  ; 


col_set_str (pinfo->cinfo,  COL_PROTOCOL,  "Link  16"); 


if 


(tree)  { 

linkl6_item  =  proto_tree_add_item (tree,  proto_linkl6,  tvb,  0,  ■ 
linkl6_tree  =  proto_item_add_subtree ( linkl 6_item,  ett_linkl6) ; 
proto  tree_add  uint (linkl6_tree,  hf  linkl6_wordformat,  tvb,  0, 


1, 

0, 


/*  Elmasry,  C.,  (2012),  Tactical  Wireless  Communications  and  Networks 


and  Challenges,  Wiley,  ISBN  9781119951766.  */ 

{ 


if 


OxlF; 

0x7; 


(wordformat  ==  WORDFORMAT_INITIAL) 
state->label  =  (cache  »  2)  & 

state->sublabel  =  (cache  »  7)  & 

state->extension  =  0; 

mli  =  (cache  >>  10)  &  0x7; 
col_append_f str (pinfo->cinfo,  COL_INFO, 
if  (tree)  { 

proto_item_append_text (linkl 6_item, 
proto_tree_add_uint (linkl6_tree,  hf_linkl 6_label ,  tvb,  0, 
proto_tree_add_uint (linkl6_tree,  hf_linkl 6_sublabel ,  tvb. 


J%d.%dl",  state->label. 


J%d.  %dl' 


state->label, 

0, 
0, 


>sublabel)  ; 
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*tree) 


TRUE)  ; 

wordformat) ; 

;  Design  Concepts 


state->sublabel) ; 

state->sublabel) ; 
state->label)  ; 

0,  state- 
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+  proto_tree_add_uint (linkl6_tree,  hf_linkl6_mli,  tvb,  0,  0,  mli) ; 

+  } 

+  }  else  if  (wordformat  ==  WORDFORMAT_EXTENSION)  { 

+  col_append_f str (pinfo->cinfo,  COL_INFO,  "  J%d.%dE%d",  state->label,  state- 

>sublabel,  state->extension) ; 

+  if  (tree) 

+  proto_item_append_text (linkl6_item,  "  J%d. %dE%d" ,  state->label,  state->sublabel, 

state->extension) ; 

+  state->extension++; 

+  }  else  if  (wordformat  ==  WORDFORMAT_CONTINUATION)  { 

+  contlabel  =  (cache  >>  2)  &  OxlF; 

+  proto_tree_add_uint (linkl6_tree,  hf_linkl6_contlabel,  tvb,  0,  0,  contlabel); 

+  col_append_f str (pinfo->cinfo,  COL_INFO,  "  J%d.%dC%d",  state->label,  state- 

>sublabel,  contlabel) ; 

+  if  (tree) 

+  proto_item_append_text (linkl6_item,  "  J%d.%dC%d",  state->label,  state- 

>sublabel,  contlabel) ; 

+  }  else  { 

+  return; 

+  } 

+ 

+  proto_item_append_text ( linkl 6_item,  "  %s",  val_to_str_const (MKPAIR (state->label,  state- 

>sublabel) ,  Linkl6_Message_Strings,  "Unknown")); 

+  } 

+ 

+void  proto_register_linkl 6 (void) 

+  { 

+  static  hf_register_info  hf [ ]  =  { 

+  {  &hf_linkl6_wordformat, 

+  {  "Word  Format",  "linkl 6 . wordformat" ,  FT_UINT8,  BASE_DEC, 

VALS (WordFormat_Strings ) ,  0x0, 

+  NULL,  HFILL  }}, 

+  {  &hf_linkl6_label, 

+  {  "Label",  "linkl 6 . label" ,  FT_UINT8,  BASE_DEC,  VALS (Linkl6_Label_Strings) ,  0x0, 

+  NULL,  HFILL  }}, 

+  {  &hf_linkl 6_sublabel , 

+  {  "Sublabel",  "linkl6 . sublabel" ,  FT_UINT8,  BASE_DEC,  NULL,  0x0, 

+  NULL,  HFILL  }}, 

+  {  &hf_linkl 6_mli , 

+  {  "Message  Length  Indicator",  "linkl 6 .mli" ,  FT_UINT8,  BASE_DEC,  NULL,  0x0, 

+  NULL,  HFILL  }}, 

+  {  &hf_linkl 6_contlabel , 

+  {  "Continuation  Word  Label",  "linkl 6 . contlabel" ,  FT_UINT8,  BASE_DEC,  NULL,  0x0, 

+  NULL,  HFILL  } } 

+  } ; 

+  static  gint  *ett[]  =  { 

+  &ett_linkl6, 

+  }; 

+ 

+  proto_linkl6  =  proto_register_protocol ( "Link  16",  "LINK16",  "linkl6"); 

+  proto_register_f ield_array (proto_linkl 6 ,  hf,  array_length  (hf ) ) ; 

+  proto_register_subtree_array (ett,  array_length (ett) ) ; 

+  register_dissector ("linkl6",  dissect_linkl6,  proto_linkl6) ; 

+  } 

+ 

+void  proto_reg_handof f_linkl 6 (void) 

+  { 

+  linkl 6_handle  =  create_dissector_handle (dissect_linkl6,  proto_linkl6) ; 

+ } 

dif f  --git  a /epan/ dissectors /packet- linkl 6 .h  b/epan/ dissectors /packet- linkl 6 .h 
new  file  mode  100644 
index  0000000 .. 9df0d4f 
-  /dev/null 

+++  b/epan /dissectors /packet- linkl 6 .h 
@@  -0,0  +1,34  @@ 

+/*  packet-linkl 6 . h 

+  *  Routines  for  Link  16  message  dissection  (MIL-STD-6016) 

+  *  William  Robertson  <aliask@gmail . com> 

+  *  Peter  Ross  <peter . rossOdsto . defence . gov. au> 

+  * 

+  *  $Id$ 
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+  * 

+  *  This  program  is  free  software;  you  can  redistribute  it  and/or 
+  *  modify  it  under  the  terms  of  the  GNU  General  Public  License 
+  *  as  published  by  the  Free  Software  Foundation;  either  version  2 
+  *  of  the  License,  or  (at  your  option)  any  later  version. 

+  * 

+  *  This  program  is  distributed  in  the  hope  that  it  will  be  useful, 

+  *  but  WITHOUT  ANY  WARRANTY;  without  even  the  implied  warranty  of 
+  *  MERCHANTABILITY  or  FITNESS  FOR  A  PARTICULAR  PURPOSE.  See  the 
+  *  GNU  General  Public  License  for  more  details. 

+  * 

+  *  You  should  have  received  a  copy  of  the  GNU  General  Public  License 
+  *  along  with  this  program;  if  not,  write  to  the  Free  Software 

+  *  Foundation,  Inc.,  51  Franklin  Street,  Fifth  Floor,  Boston,  MA  02110-1301  USA 
+  */ 

+ 

+#ifndef  _ PACKET_LINK1 6_H _ 

+#define  _ PACKET_LINK1 6_H _ 

+ 

+#include  <epan/value_string.h> 

+ 

+extern  const  value_string  Linkl6_NPG_Strings [ ] ; 

+ 

+typedef  struct  { 

+  gint  label,  sublabel,  extension; 

+}  Linkl6State; 

+ 

+#endif  /*  _ PACKET_LINK1 6_H^ _  */ 

1.8. 1.2 


Figure  Al:  Software  patch  (part  1  of  3) 


From  93afe993b7f801c6a8b761c978bbdc26cf7bca06  Mon  Sep  17  00:00:00  2001 
From:  Peter  Ross  <peter . ross@dsto . defence . gov. au> 

Date:  Wed,  16  Oct  2013  10:00:02  +1100 

Subject:  [PATCH  2/3]  packet-dis:  SISO-J  Link  16  PDU  dissector  ( SlSO-STD-002 ) 


epan/dissectors/packet-dis-enums . c 
epan/dis sector s/packet-dis-enums .h 
epan/dissectors/packet-dis-f ields . c 
epan/dissectors/packet-dis-f ields .h 
epan/dissectors/packet-dis-pdus . c 
epan/dis sector s/packet-dis-pdus .h 
epan/dissectors/packet-dis . c 
7  files  changed,  293  insertions (+) , 


20 

16 

33 

24 

170 

2 

74 


+++++ 

++++ 


+++++-- 

++++- 


46  deletions (-) 


diff  --git  a/epan/dissectors/packet-dis-enums . c  b/epan/dissectors/packet-dis-enums . c 
index  73d82 64 . . d53b3a7  100644 

-  a/epan/dissectors/packet-dis-enums . c 

+++  b/epan/dissectors/packet-dis-enums . c 

@@  -453,6  +453,25  @@  const  value_string  DlS_PDU_MajorModulation_Strings [ ]  = 

(0,  NULL  } 

}; 


tconst  range_string  DlS_PDU_Linkl6_CVLL_Strings [ ]  =  { 
+  {  0,  127,  "Crypto  Variable"  }, 

+  {  255,  255,  "NO  STATEMENT"  }, 

+  (0,  0,  NULL  } 

+  }; 


tconst 
+  { 

+  { 

+  { 

+  { 

+  { 

+  { 


value_string  DlS_PDU_Linkl6_MessageType_Strings [ ]  = 


D 1 S_ME  S  S AGE_T YPE_UT 1 DS_HEADER_ME  S  SAGE  S , 
D1  S_MESSAGE_TYPE_RTT_A_B , 
D1S_MESSAGE_TYPE_RTT_REPLY, 

D 1 S_ME  S  S AGE_T Y  PE_ JT 1 DS_VO 1 CE_CVS  D , 
D1S_MESSAGE_TYPE_UT1DS_V01CE_LPC10, 


"UTIDS  Header/Messages"  }, 
"RTT  A/B"  } , 

"RTT  Reply"  } , 

"JTIDS  Voice  CVSD"  }, 
"JTIDS  Voice  LPCIO"  }, 
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+  {  DIS_MESSAGE_TYPE_JTIDS_V0ICE_LPC12,  "JTIDS  Voice  LPC12"  }, 

+  {  DIS_MESSAGE_TYPE_JTIDS_LET,  "JTIDS  LET"  }, 

+  {  DIS_MESSAGE_TYPE_VMF,  "VMF"  }, 

+  {0,  NULL  } 

+  }; 

+ 

const  value_string  DIS_PDU_EmissionFunction_Strings [ ]  = 

{DIS_EMISSION_FUNCTION_OTHER,  "Other"  }, 

@@  -663,6  +682,7  @@  const  value_string  DIS_PDU_TerminalSecondaryMode_Strings [ ]  = 

{0,  NULL  } 

}; 

+/*  http ; //discussions . sisostds . org/threadview . aspx?f id=l 8 &threadid=53172  */ 
const  value_string  DIS_PDU_ModParamSyncState_Strings [ ]  = 

{ 

{0,  "Undefined"  }, 

diff  --git  a/epan/dissectors/packet-dis-enums .h  b/epan/dissectors/packet-dis-enums .h 
index  913eblf . . 0ab3b96  100644 

-  a/epan/dissectors/packet-dis-enums .h 

+++  b/epan/dissectors/packet-dis-enums .h 

@@  -48,6  +48,8  @@  extern  const  value_string  DIS_PDU_TSAllocationFidelity_Strings [ ] ; 
extern  const  value_string  DIS_PDU_TerminalPrimaryMode_Strings [ ] ; 
extern  const  value_string  DIS_PDU_TerminalSecondaryMode_Strings [ ] ; 
extern  const  value_string  DIS_PDU_ModParamSyncState_Strings [ ] ; 
textern  const  range_string  DIS_PDU_Linkl6_CVLL_Strings [ ] ; 
textern  const  value_string  DIS_PDU_Linkl6_MessageType_Strings [ ] ; 


typedef  enum 

@@  -438,6  +440,20  @@  extern  const  value_string  DIS_PDU_MajorModulation_Strings [ ] ; 

typedef  enum 

{ 

+  DIS_MESSAGE_TYPE_JTIDS_HEADER_MESSAGES  =  0, 

+  DIS_MESSAGE_TYPE_RTT_A_B, 

+  DIS_MESSAGE_TYPE_RTT_REPLY, 

+  D I S_ME  S  S AGE_T YPE_ JT I DS_V0 1 CE_CVS  D , 

+  DIS_MESSAGE_TYPE_JTIDS_VOICE_LPC10, 

+  DIS_MESSAGE_TYPE_JTIDS_V0ICE_LPC12, 

+  DIS_MESSAGE_TYPE_JTIDS_LET, 

+  DIS_MESSAGE_TYPE_VMF 

+}  DIS_PDU_MessageType; 

+ 

textern  const  value_string  DIS_PDU_JTIDS_MessageType_Strings [ ] ; 

+ 

+typedef  enum 
+  { 

DIS_EMISSION_FUNCTION_OTHER  =  0, 

DIS_EMISSION_FUNCTION_MULTI_FUNCTION  =  1, 

DIS_EMISSION_FUNCTION_EARLY_WARNING_SURVEILLANCE  =  2, 

diff  --git  a/epan/dissectors/packet-dis-f ields . c  b/epan/dissectors/packet-dis-f ields . c 
index  2b2007f . . c6d7440c  100644 

-  a/epan/dissectors/packet-dis-f ields . c 

+++  b/epan/dissectors/packet-dis-f ields . c 
@@  -43,7  +43,9  @@  guint32  category; 
guint32  radioID; 
guint32  disRadioTransmitState; 
guint32  encodingScheme; 

+guint32  tdlType; 

guint32  numSamples; 

+guint32  messageType; 
guint32  numFixed; 
guint32  numVariable; 
guint32  numBeams; 

@@  -209,6  +211,20  @@  DIS_ParserNode  DIS_FIELDS_MOD_PARAMS_JTIDS_MIDS [ ]  = 

{  DIS_FIELDTYPE_END,  NULL, 0,0, 0,0  } 

}; 

+DIS_ParserNode  DIS_FIELDS_SIGNAL_LINK16_NETW0RK_HEADER [ ]  = 

+  { 
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+  {  DIS_FIELDTYPE_LINK16_NPG, 

+  {  DIS_FIELDTYPE_UINT8, 

+  {  DIS_FIELDTYPE_LINK16_TSEC_CVLL, 

+  {  DIS_FIELDTYPE_LINK16_MSEC_CVLL, 

+  {  DIS_FIELDTYPE_LINK16_MESSAGE_TYPE 

+  {  DIS_FIELDTYPE_UINT16, 

+  {  DIS_FIELDTYPE_UINT32, 

+  {  DIS_FIELDTYPE_LINK16_PTT, 

+  {  DIS_FIELDTYPE_LINK16_MESSAGE_DATA, 

+  {  DIS_FIELDTYPE_END, 

+  }; 

+ 

/*  Array  records 
*/ 

DIS  ParserNode  DIS_FIELDS_FIXED_DATUM [ ] 


"Network  Participant  Group" , 0 , 0 , 0 , 0  } 
"Network  Number ",  0 , 0 , 0 , 0  }, 

"TSEC  CVLL", 0, 0, 0, 0  }, 

"MSEC  CVLL", 0, 0, 0, 0  }, 

"Message  Type", 0, 0, 0, SmessageType  }, 
"Padding", 0, 0, 0, 0  }, 

"Time  Slot  ID", 0,0, 0,0  }, 

"Perceived  Transmit  Time", 0, 0, 0, 0  }, 
"Message  Data", 0, 0, 0, 0  }, 

NULL, 0,0, 0,0  } 


@@  -513,6  +529,7  @@  void  initializeFieldParsers (void) 
initializeParser (DIS_FIELDS_VR_UA_BEAM) ; 
initializeParser (DIS_FIELDS_MOD_PARAMS_CCTT_SINCGARS) ; 
initializeParser (DIS_FIELDS_MOD_PARAMS_JTIDS_MIDS) ; 

+  initializeParser (DIS  FIELDS  SIGNAL  LINK16  NETWORK  HEADER); 


@@  -868,6  +885,10  @@  gint  parseField_Enum (tvbuf f_t  *tvb,  proto_tree  *tree,  gint  offset, 
DIS_ParserNod 

break; 

} 

break; 

+  case  DIS_FIELDTYPE_LINK16_MESSAGE_TYPE; 

+  enumStrings  =  DIS_PDU_Linkl6_MessageType_Strings; 

+  dis_hf_id  =  hf_dis_signal_linkl6_message_type; 

+  break; 

default : 

enumStrings  =  0; 
break; 

@@  -1019,7  +1040,7  @@  gint  parseField_Timestamp (tvbuf f_t  *tvb,  proto_tree  *tree,  gint 
offset,  DIS_Pars 

/*  Parse  a  variable  parameter  field. 

*/ 

-gint  parseField_VariableParameter (tvbuf f_t  *tvb,  proto_tree  *tree,  gint  offset) 

+gint  parseField_VariableParameter (tvbuf f_t  *tvb,  proto_tree  *tree,  gint  offset,  packet_info 
*pinfo) 

{ 

DIS_ParserNode  *paramParser  =  0; 

@@  -1045,7  +1066,7  @@  gint  parseField_VariableParameter (tvbuf f_t  *tvb,  proto_tree  *tree, 
gint  offset) 

/*  Parse  the  variable  parameter  fields  */ 
if  (paramParser ) 

{ 

offset  =  parseFields (tvb,  tree,  offset,  paramParser) ; 

+  offset  =  parseFields (tvb,  tree,  offset,  paramParser,  pinfo) ; 

} 


return  offset; 

@@  -1053,7  +1074,7  @@  gint  parseField_VariableParameter (tvbuf f_t  *tvb,  proto_tree  *tree, 
gint  offset) 

/*  Parse  a  variable  record  field. 

*/ 

-gint  parseField_VariableRecord (tvbuf f_t  *tvb,  proto_tree  *tree,  gint  offset) 

+gint  parseField_VariableRecord (tvbuf f_t  *tvb,  proto_tree  *tree,  gint  offset,  packet_info 
*pinfo) 

{ 

DIS_ParserNode  *paramParser  =  0; 

@@  -1086,7  +1107,7  @@  gint  parseField_VariableRecord (tvbuf f_t  *tvb,  proto_tree  *tree,  gint 
offset) 

/*  Parse  the  variable  record  fields  */ 
if  (paramParser) 
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{ 

offset  =  parseFields (tvb,  tree,  offset,  paramParser ) ; 

+  offset  =  parseFields (tvb,  tree,  offset,  paramParser,  pinfo) ; 

} 


/*  Should  alignment  padding  be  added  */ 

@@  -1105,7  +1126,7  @@  gint  parseField_VariableRecord (tvbuf f_t  *tvb,  proto_tree  *tree,  gint 
offset) 

/*  Parse  a  variable  electromagnetic  emission  system  beam. 

*/ 

gint  parseField_ElectromagneticEmissionSystemBeam ( 
tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset) 

+  tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset,  packet_info  *pinfo) 

DlS_ParserNode  *paramParser  =  0; 

@@  -1116,7  +1137,7  @@  gint  parseField_ElectromagneticEmissionSystemBeam ( 

/*  Parse  the  variable  parameter  fields  */ 
if  (paramParser) 

{ 

offset  =  parseFields (tvb,  tree,  offset,  paramParser) ; 

+  offset  =  parseFields (tvb,  tree,  offset,  paramParser,  pinfo) ; 

} 


return  offset; 

diff  --git  a/epan/dissectors/packet-dis-fields .h  b/epan/dissectors/packet-dis-fields .h 
index  d306a4d. . 477bcdb  100644 


-  a/epan/dissectors/packet-dis-f ields .h 

+++  b/epan/dissectors/packet-dis-f ields .h 
@@  -54,6  +54,7  @@  extern  int  hf_dis_radio_id; 
hf_dis_ens ; 
hf  dis  ens  class; 


extern 

int 

extern 

int 

extern 

int 

+extern 

int 

extern 

int 

extern 

int 

extern 

int 

@@  -96, 

9  +9^ 

extern 

int 

extern 

int 

extern 

int 

+extern 

int 

+extern 

int 

+extern 

int 

+extern 

int 

+extern 

int 

+extern 

int 

extern 

int 

extern 

int 

+extern 

int 

+extern 

int 

@@  extern  int  hf_dis_antenna_pattern_parameter_dump; 


hf_dis_num_ua_emitter_systems ; 


@@  -214,6  +223,10  @@  typedef  enum 

D1S_F1ELDTYPE_TRANSM1TTER_SEC0NDARY_M0DE, 

D1S_F1ELDTYPE_JT1DS_SYNC_STATE, 

D1S_F1ELDTYPE_NETW0RK_SYNC_1D, 

+  D1S_F1ELDTYPE_L1NK16_NPG, 

+  D1S_F1ELDTYPE_L1NK16_TSEC_CVLL, 

+  D1S_F1ELDTYPE_L1NK16_MSEC_CVLL, 

+  D 1 S_F 1 EL  DT Y  PE_L 1 NK 1 6_ME  S  S AGE_T Y  PE , 

D1S_F1ELDTYPE_NUM_ELECTR0MAGNET1C_EM1SS10N_SYSTEMS, 

D1S_F1ELDTYPE_NUM_0F_SHAFTS, 

D1S_F1ELDTYPE_NUM_0F_APAS, 

@@  -244,6  +257,8  @@  typedef  enum 

D1S_F1ELDTYPE_ANTENNA_PATTERN_PARAMETERS, 

D1S_F1ELDTYPE_M0D_PARAMS_CCTT_S1NCGARS, 

D1 S_F1ELDTYPE_M0D_PARAMS_JT1 DS_M1 DS , 

+  D 1 S_F 1 EL  DT Y  PE_L 1 NK 1 6_ME  S  S AGE_DATA , 
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+  DIS_FIELDTYPE_LINK16_PTT, 

DIS_FIELDTYPE_ELECTROMAGNETIC_EMISSION_SYSTEM_BEAM, 

DIS_FIELDTYPE_ELECTROMAGNETIC_EMISSION_SYSTEM, 

DIS_FIELDTYPE_EMITTER_SYSTEM, 

@@  -316,6  +331,7  @@  extern  DlS_ParserNode  D1S_F1ELDS_VECT0R_FL0AT_32 [ ] ; 
extern  DlS_ParserNode  D1S_F1ELDS_VECT0R_FL0AT_64 [ ] ; 
extern  DlS_ParserNode  D1S_F1ELDS_M0D_PARAMS_CCTT_S1NCGARS [ ] ; 
extern  DlS_ParserNode  D1S_F1ELDS_M0D_PARAMS_JT1DS_M1DS [ ] ; 
textern  DlS_ParserNode  D1S_F1ELDS_S1GNAL_L1NK16_NETW0RK_HEADER [ ] ; 
extern  DlS_ParserNode  D1S_F1ELDS_EM1TTER_SYSTEM [ ] ; 
extern  DlS_ParserNode  D1S_F1ELDS_FUNDAMENTAL_PARAMETER_DATA [ ] ; 
extern  DlS_ParserNode  D1S_F1ELDS_TRACK_JAM [ ] ; 

@@  -360,11  +376,11  @@  extern  gint  parseField_Double (tvbuf f_t  *tvb,  proto_tree  *tree,  gint 
offset,  D1S_ 


extern  gint  parseField_Timestamp (tvbuf f_t  *tvb,  proto_tree  *tree,  gint  offset, 
DlS_ParserNode  parserNode) ; 

-extern  gint  parseField_VariableParameter (tvbuf f_t  *tvb,  proto_tree  *tree,  gint  offset); 
textern  gint  parseField_VariableParameter (tvbuf f_t  *tvb,  proto_tree  *tree,  gint  offset, 
packet_info  *pinfo) ; 

-extern  gint  parseField_VariableRecord (tvbuf f_t  *tvb,  proto_tree  *tree,  gint  offset); 
textern  gint  parseField_VariableRecord (tvbuf f_t  *tvb,  proto_tree  *tree,  gint  offset, 
packet_info  *pinfo) ; 

-extern  gint  parseField_ElectromagneticEmissionSystemBeam (tvbuf f_t  *tvb,  proto_tree  *tree, 
gint  offset) ; 

textern  gint  parseField_ElectromagneticEmissionSystemBeam (tvbuf f_t  *tvb,  proto_tree  *tree, 
gint  offset,  packet_info  *pinfo) ; 

extern  guint32  disProtocolVersion; 
extern  guint32  pduType; 

@@  -375,7  +391,9  @@  extern  guint32  entityDomain; 
extern  guint32  radiolD; 
extern  guint32  disRadioTransmitState; 
extern  guint32  encodingScheme; 
textern  guint32  tdlType; 

extern  guint32  numSamples ; 
textern  guint32  messageType; 
extern  guint32  numFixed; 
extern  guint32  numVariable; 
extern  guint32  numBeams; 

diff  --git  a/epan/dissectors/packet-dis-pdus . c  b/epan/dissectors/packet-dis-pdus . c 
index  939c759 . . f lelf 30  100644 

-  a/epan/dissectors/packet-dis-pdus . c 

+++  b/epan/dissectors/packet-dis-pdus . c 
@@  -29,6  +29,8  @@ 

#include  "packet-dis-pdus .h" 

#include  "packet-dis-fields .h" 

#include  "packet-dis-enums .h" 

+#include  "packet-linkl6 .h" 

+#include  "packet-ntp.h" 


#define  DiS_PDU_MAX_VARiABLE_PARAMETERS 
#define  DiS_PDU_MAX_VARiABLE_RECORDS 
@@  -131,7  +133,7  @@  DiS_ParserNode  DiS_PARSER 
{  DiS_FiELDTYPE_ENTiTY_iD, 

{  DiS_FiELDTYPE_RADiO_iD, 

{  DiS_FiELDTYPE_ENCODiNG_SCHEME, 

{  DiS_FiELDTYPE_TDL_TYPE, 

+  {  DiS_FiELDTYPE_TDL_TYPE, 

{  DiS_FiELDTYPE_SAMPLE_RATE, 

{  DiS_FiELDTYPE_DATA_LENGTH, 

{  DiS_FiELDTYPE_NUMBER_OF_SAMPLES, 

@@  -732,9  +734,92  @@  void  initializeParser ( 

} 


16 

16 

SiGNAL_PDU[]  = 

"Entity  ID", 0,0, 0,0  }, 

"Radio  ID" , 0 , 0 , 0 , SradiolD  }, 

"Encoding  Scheme" , 0 , 0 , 0 , SencodingScheme  }, 
"TDL  Type", 0, 0, 0, 0  }, 

"TDL  Type", 0, 0, 0, StdlType  }, 

"Sample  Rate", 0, 0, 0, 0  }, 

"Data  Length", 0, 0, 0, 0  }, 

"Number  of  Samples" , 0 , 0 , 0 , SnumSamples  }, 
S_ParserNode  parserNodes [ ] ) 


+/*  Parse  Link  16  Message  Data  record  (SiSO-STD-002,  Tables  5.2.5  through  5.2.12) 
+  */ 
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1 +static  gint  parse  Linkl6  Message  Data (proto  tree  *tree,  tvbuff  t 

*tvb,  gint 

offset. 

packet  info  *pinfo) 

+  { 

+ 

guint32  cache,  value,  i; 

+ 

Linkl6State  state; 

+ 

+ 

+ 

tvbuff  t  *newtvb; 

switch  (messageType)  { 

+ 

case  DIS  MESSAGE  TYPE  JTIDS  HEADER  MESSAGES; 

+ 

cache  =  tvb  get  ntohl (tvb,  offset) ; 

+ 

value  =  cache  &  0x7; 

+ 

proto  tree  add  text (tree,  tvb,  offset,  4, 

+ 

+ 

+ 

"Time  Slot  Type:  %d",  value); 

value  =  (cache  »  3)  &  0x1; 

+ 

proto  tree  add  text (tree,  tvb,  offset,  4, 

+ 

+ 

+ 

"Relay  Transmission  Indicator;  %d",  value); 

value  =  (cache  >>  4)  &  0x7FFF; 

+ 

+ 

+ 

+ 

+ 

proto  tree  add  uint(tree,  hf  dis  signal  linkl6  stn. 

tvb. 

offset,  4, 

value) ; 

col  append  f str (pinfo->cinfo,  COL  INFO,  ",  STN=0%o, 

Link 

1 6  Words : " , 

.  value) ; 

value  =  (cache  »  19) ; 
offset  +=  4; 

+ 

+ 

+ 

cache  =  tvb  get  ntohl (tvb,  offset) ; 

+ 

value  1=  (cache  &  0x7)  «  13; 

+ 

proto  tree  add  text (tree,  tvb,  offset  -  4,  8, 

+ 

+ 

+ 

+ 

+ 

"Secure  Data  Unit  Serial  Number;  %d",  value); 

offset  +=  4; 

memset (Sstate,  0,  sizeof  (state) ) ; 

+ 

+ 

+ 

pinfo->private  data  =  Sstate; 

for  (1  =  0;  1  <  (encodingScheme  &  0x3FFF) ;  i++)  { 

+ 

gluts  *word  =  (gintS  *)g  malloc(lO); 

+ 

if  ( !  (1  &  1)  )  { 

+ 

word[0]  =  (cache  »  16)  &  OxFF; 

+ 

word[l]  =  (cache  >>24)  &  OxFF; 

+ 

cache  =  tvb  get  ntohl (tvb,  offset) ; 

+ 

offset  +=  4; 

+ 

word [2]  =  cache  &  OxFF; 

+ 

word[3]  =  (cache  »  8)  &  OxFF; 

+ 

word[4]  =  (cache  >>  16)  &  OxFF; 

+ 

word[5]  =  (cache  >>  24)  &  OxFF; 

+ 

cache  =  tvb  get  ntohl (tvb,  offset) ; 

+ 

offset  +=  4; 

+ 

word [6]  =  cache  &  OxFF; 

+ 

word [7]  =  (cache  »  8)  &  OxFF; 

+ 

word[8]  =  (cache  »  16)  &  OxFF; 

+ 

word[9]  =  (cache  >>  24)  &  OxFF; 

+ 

}  else  { 

+ 

cache  =  tvb  get  ntohl (tvb,  offset) ; 

+ 

offset  +=  4; 

+ 

word[0]  =  cache  &  OxFF; 

+ 

word[l]  =  (cache  »  8)  &  OxFF; 

+ 

word[2]  =  (cache  >>  16)  &  OxFF; 

+ 

word[3]  =  (cache  >>  24)  &  OxFF; 

+ 

cache  =  tvb  get  ntohl (tvb,  offset) ; 

+ 

offset  +=  4; 

+ 

word [4]  =  cache  &  OxFF; 

+ 

word[5]  =  (cache  »  8)  &  OxFF; 

+ 

word [6]  =  (cache  »  16)  &  OxFF; 

+ 

word[7]  =  (cache  >>  24)  &  OxFF; 

+ 

cache  =  tvb  get  ntohl (tvb,  offset) ; 

+ 

offset  +=  4; 

+ 

word [8]  =  cache  &  OxFF; 

+ 

+ 

word[9]  =  (cache  »  8)  &  OxFF; 

} 
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+  newtvb  =  tvb_new_child_real_data (tvb,  word,  10,  10); 

+  tvb_set_free_cb (newtvb,  g_free) ; 

+  add_new_data_source (pinfo,  newtvb,  "Link  16  Word"); 

+  call_dissector ( f ind_dissector ( "linkl 6" ) ,  newtvb,  pinfo,  tree); 

+  } 

+  break; 

+  } 

+  return  offset; 

t) 

+ 

/*  Parse  packet  data  based  on  a  specified  array  of  DiS_ParserNodes . 

*/ 

-gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset,  DiS_ParserNode 
parserNodes [ ] ) 

tgint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset,  DiS_ParserNode 
parserNodes [] ,  packet_info  *pinfo) 

{ 

guint  fieldindex  =  0; 

guint  f leldRepeatLen  =  0; 

@@  -839,13  +924,17  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DiS_ParserNode  pa 

pi  =  proto_tree_add_item (tree,  hf_dis_ens,  tvb,  offset,  2,  ENC_BiG_ENDiAN) ; 
sub_tree  =  proto_item_add_subtree (pi,  ett_dis_ens); 
proto_tree_add_item (sub_tree,  hf_dis_ens_class,  tvb,  offset,  2, 

ENC_BiG_ENDiAN) ; 

proto_tree_add_item (sub_tree,  hf_dis_ens_type,  tvb,  offset,  2,  ENC_BiG_ENDiAN) ; 
+  proto_tree_add_item (sub_tree, 

+  (uintVal  »  14)  ==  DiS_ENCODiNG_CLASS_ENCODED_AUDiO  ?  hf_dis_ens_type_audio 

;  hf_dis_ens_type, 

+  tvb,  offset,  2,  ENC_BiG_ENDiAN); 

proto_item_set_end (pi,  tvb,  offset); 

* (parserNodes [fieldindex] .outputVar)  =  (guint32 ) uintVal; 

offset  +=  2; 

break; 

case  DiS_FiELDTYPE_TDL_TYPE; 

+  uintVal  =  tvb_get_ntohs (tvb,  offset) ; 

proto_tree_add_item (tree,  hf_dis_tdl_type,  tvb,  offset,  2,  ENC_BiG_ENDiAN) ; 

+  * (parserNodes [fieldindex] .outputVar)  =  (guint32 ) uintVal; 

offset  +=  2; 
break; 

case  DiS_FiELDTYPE_SAMPLE_RATE; 

@@  -862,12  +951,31  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DiS_ParserNode  pa 

* (parserNodes [fieldindex] .outputVar)  =  (guint32 ) uintVal; 

offset  +=  2; 

break; 


case  DiS_FiELDTYPE_RADiO_DATA; 

newtvb  =  tvb_new_subset_remaining (tvb,  offset); 

proto_tree_add_item (tree,  hf_dis_signal_data,  newtvb,  0,  -1,  ENC_NA  ); 

+  if  (tdlType  ==  DiS_TDL_TYPE_LiNK16_STD)  ( 

+  pi  =  proto_tree_add_text (tree,  tvb,  offset,  16,  "Link  16  Network  Header"); 

+  sub_tree  =  proto_item_add_subtree (pi, 

ett_dis_signal_linkl 6_network_header ) ; 

+  offset  =  parseFields (tvb,  sub_tree,  offset, 

DiS_FiELDS_SiGNAL_LiNK16_NETW0RK_HEADER,  pinfo) ; 

+  proto_item_set_end (pi,  tvb,  offset); 

+ 

+  pi  =  proto_tree_add_text (tree,  tvb,  offset,  -1,  "Link  16  Message  Data;  %s", 

+  val_to_str (messageType,  DiS_PDU_Linkl6_MessageType_Strings,  "")); 

+  sub_tree  =  proto_item_add_subtree (pi,  ett_dis_signal_linkl6_message_data) ; 

+  offset  =  parse_Linkl6_Message_Data (sub_tree,  tvb,  offset,  pinfo); 

+  proto_item_set_end (pi,  tvb,  offset); 

+  }  else  ( 

+  newtvb  =  tvb_new_subset_remaining (tvb,  offset); 

+  proto_tree_add_item (tree,  hf_dis_signal_data,  newtvb,  0,  -1,  ENC_NA  ); 

+  } 

/*  ****q]^*******  need  to  look  for  padding  bytes  */ 

break; 

+  case  DiS  FIELDTYPE  LiNK16  PTT ; 
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+  if  (tvb_get_ntohl (tvb,  offset)  ==  OxFFFFFFFF) 

+  proto_tree_add_text (tree,  tvb,  offset,  8,  "%s;  NO  STATEMENT", 

parserNodes [fieldindex] . fieldLabel) ; 

+  else 

+  proto_tree_add_item (tree,  hf_dis_signal_linkl6_ptt,  tvb,  offset,  8, 

ENC_TIME_NTP | ENC_BIG_ENDIAN) ; 

+  offset  +=  8; 

+  break; 

case  DIS_FIELDTYPE_RADIO_CATEGORY; 

proto_tree_add_item (tree,  hf_dis_radio_category,  tvb,  offset,  1, 
ENC_BIG_ENDIAN) ; 

offset  +=  1; 

@@  -1003,7  +1111,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DlS_ParserNode  pa 

pi  =  proto_tree_add_text (tree,  tvb,  offset,  -1,  "%s", 

parserNodes [fieldindex] . fieldLabel ) ; 
sub_tree  =  proto_item_add_subtree (pi,  parserNodes [fieldindex] .ettVar) ; 
offset  =  parseFields (tvb,  sub_tree,  offset, 
D1S_F1ELDS_M0D_PARAMS_CCTT_S1NCGARS) ; 

+  offset  =  parseFields (tvb,  sub_tree,  offset, 

D1S_F1ELDS_M0D_PARAMS_CCTT_S1NCGARS,  pinfo) ; 

proto_item_set_end (pi,  tvb,  offset); 
break; 

} 

@@  -1011,7  +1119,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DlS_ParserNode  pa 

pi  =  proto_tree_add_text (tree,  tvb,  offset,  -1,  "%s", 

parserNodes [fieldindex] . fieldLabel ) ; 
sub_tree  =  proto_item_add_subtree (pi,  parserNodes [fieldindex] .ettVar) ; 
offset  =  parseFields (tvb,  sub_tree,  offset, 
D1S_F1ELDS_M0D_PARAMS_JT1DS_M1DS)  ; 

+  offset  =  parseFields (tvb,  sub_tree,  offset, 

D1S_F1ELDS_M0D_PARAMS_JT1DS_M1DS,  pinfo) ; 

proto_item_set_end (pi,  tvb,  offset); 
break; 


@@  -1028,7  +1136,18  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DlS_ParserNode  pa 

newtvb  =  tvb_new_subset_remaining (tvb,  offset); 

proto_tree_add_item (tree,  hf_dis_antenna_pattern_parameter_dump,  newtvb,  0,  -1, 

ENC_NA  ) ; 

break; 


+  case  D1S_F1ELDTYPE_L1NK16_NPG; 

+  proto_tree_add_item (tree,  hf_dis_signal_linkl6_npg,  tvb,  offset,  2, 

ENC_B1G_END1AN) ; 

+  offset  +=  2; 

+  break; 

+  case  D1S_F1ELDTYPE_L1NK16_TSEC_CVLL; 

+  proto_tree_add_item (tree,  hf_dis_signal_linkl6_tsec_cvll,  tvb,  offset,  1, 

ENC_NA) ; 

+  offset++; 

+  break; 

+  case  D1S_F1ELDTYPE_L1NK16_MSEC_CVLL; 

+  proto_tree_add_item (tree,  hf_dis_signal_linkl6_msec_cvll,  tvb,  offset,  1, 

ENC_NA) ; 

+  offset++; 

+  break; 


/*  padding  */ 

case  D1S_F1ELDTYPE_PAD8 ; 

@@  -1066,6  +1185,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DlS_ParserNode  pa 

case  D1S_F1ELDTYPE_PERS1STENT_0BJECT_TYPE; 
case  D1S_F1ELDTYPE_EM1SS10N_FUNCT10N; 
case  D1S_F1ELDTYPE_BEAM_FUNCT10N; 

+  case  D1S_F1ELDTYPE_L1NK16_MESSAGE_TYPE; 

offset  =  parseField_Enum (tvb,  tree,  offset, 
parserNodes [ fieldindex] ,  1); 
break; 

@@  -1210,7  +1330,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset. 
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DIS_ParserNode  pa 

proto_item  *newSubtree  =  proto_item_add_subtree (newField, 
parserNodes [fieldindex] .ettVar) ; 
offset  =  parseFields (tvb,  newSubtree,  offset, 
parserNodes [ fieldindex] .children); 

+  parserNodes [fieldindex] . children,  pinfo) ; 

} 

proto_item_set_end (newField,  tvb,  offset); 
break; 

@@  -1248,7  +1368,7 
DIS_ParserNode  pa 


} 

} 

@@  -1274,7  +1394,7 
DIS_ParserNode  pa 


} 

proto_item_set_end (newField,  tvb,  offset); 

} 

@@  -1296,7  +1416,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DIS_ParserNode  pa 

(newField,  ettVariableData) ; 
offset  =  parseFields 

(tvb,  newSubtree,  offset, 
parserNodes [ fieldindex] .children); 

+  parserNodes [fieldindex] . children,  pinfo); 

proto_item_set_end (newField,  tvb,  offset); 

} 


@@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 

parserNodes [fieldindex] . fieldLabel)  ; 
newSubtree  =  proto_item_add_subtree (newField,  ettFixedData) ; 
offset  =  parseFields  (tvb,  newSubtree,  offset, 
parserNodes [fieldindex]  . children)  ; 
parserNodes [fieldindex] .children,  pinfo); 
proto_item_set_end (newField,  tvb,  offset); 


@@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 

/*  XXX  is  this  really  necessary?  */ 
tvb_ensure_length_remaining (tvb,  offset+4) ; 
offset  =  parseFields  (tvb,  newSubtree,  offset, 
parserNodes [fieldindex]  . children)  ; 
parserNodes [fieldindex] .children,  pinfo); 


@@  -1321,7  +1441,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DIS_ParserNode  pa 

{ 

offset  =  parseFields 

(tvb,  newSubtree,  offset, 
parserNodes [fieldindex] .children); 

+  parserNodes [fieldindex] . children,  pinfo); 


proto_item_set_end (newField,  tvb,  offset); 

} 


@@  -1344,9  +1464,9  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DIS_ParserNode  pa 

ettVariableParameters [i] )  ; 
offset  =  parseFields 

(tvb,  newSubtree,  offset, 
parserNodes [fieldindex] .children); 

+  parserNodes [fieldindex] . children,  pinfo); 

offset  =  parseField_VariableParameter 
(tvb,  newSubtree,  offset) ; 

+  (tvb,  newSubtree,  offset,  pinfo) ; 

proto_item_set_end (newField,  tvb,  offset); 

} 


} 

@@  -1369,9  +1489,9 
DIS_ParserNode  pa 


+ 


@@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 

ettVariableRecords [i] ) ; 

offset  =  parseFields 

(tvb,  newSubtree,  offset, 
parserNodes [fieldindex] . children) ; 
parserNodes [fieldindex] .children,  pinfo); 
offset  =  parseField_VariableRecord 
(tvb,  newSubtree,  offset) ; 
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+ 


(tvb,  newSubtree,  offset,  pinfo) ; 
proto_item_set_end (newField,  tvb,  offset); 


@@  -1390,7  +1510,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DlS_ParserNode  pa 

proto_item_add_subtree (newField, 
parserNodes [fieldlndex] .ettVar) ; 
offset  =  parseFields (tvb,  newSubtree,  offset, 
parserNodes [ fieldlndex] .children); 

+  parserNodes [fieldlndex] . children,  pinfo); 


proto_item_set_end (newField,  tvb,  offset); 

} 

@@  -1410,7  +1530,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DlS_ParserNode  pa 

proto_item_add_subtree (newField, 
parserNodes [fieldlndex] .ettVar) ; 
offset  =  parseFields (tvb,  newSubtree,  offset, 
parserNodes [ fieldlndex] .children); 

+  parserNodes [fieldlndex] . children,  pinfo); 


proto_item_set_end (newField,  tvb,  offset); 

} 

@@  -1441,7  +1561,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DlS_ParserNode  pa 

proto_item_add_subtree (newField, 
parserNodes [fieldlndex] .ettVar) ; 
offset  =  parseFields (tvb,  newSubtree,  offset, 
parserNodes [ fieldlndex] .children); 

+  parserNodes [fieldlndex] . children,  pinfo); 


proto_item_set_end (newField,  tvb,  offset); 

} 

@@  -1474,7  +1594,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DlS_ParserNode  pa 

proto_item_add_subtree (newField, 
parserNodes [fieldlndex] .ettVar) ; 
offset  =  parseFields (tvb,  newSubtree,  offset, 
parserNodes [fieldlndex] .children); 

+  parserNodes [fieldlndex] . children,  pinfo); 

} 

proto_item_set_end (newField,  tvb,  offset); 

} 


@@  -1507,7  +1627,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DlS_ParserNode  pa 

proto_item_add_subtree (newField, 
parserNodes [fieldlndex] .ettVar) ; 
offset  =  parseFields (tvb,  newSubtree,  offset, 
parserNodes [ fieldlndex] .children); 

+  parserNodes [fieldlndex] . children,  pinfo); 


proto_item_set_end (newField,  tvb,  offset); 

} 

@@  -1547,7  +1667,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DlS_ParserNode  pa 

proto_item_add_subtree (newField, 
parserNodes [fieldlndex] .ettVar) ; 
offset  =  parseFields (tvb,  newSubtree,  offset, 
parserNodes [ fieldlndex] .children); 

+  parserNodes [fieldlndex] . children,  pinfo); 


proto_item_set_end (newField,  tvb,  offset); 

} 

@@  -1572,7  +1692,7  @@  gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset, 
DlS_ParserNode  pa 

proto_item_add_subtree (newField, 
parserNodes [fieldlndex] .ettVar) ; 
offset  =  parseFields (tvb,  newSubtree,  offset, 
parserNodes [fieldlndex] .children); 

+  parserNodes [fieldlndex] . children,  pinfo); 
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} 

proto_item_set_end (newField,  tvb,  offset) ; 

} 

dif f  --git  a /epan/dis sector s/packet-dis-pdus .h  b/epan/dis sector s/packet-dis-pdus .h 
index  e964371 . .b9d2448  100644 

-  a /epan/dis sector s/packet-dis-pdus .h 

+++  b/epan/dissectors/packet-dis-pdus .h 

@@  -111,6  +111,6  @@  void  initializeParser (DIS_ParserNode  parserNodes [ ] ) ; 
void  initializeParsers (void) ; 

-gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset,  DIS_ParserNode 
parserNodes [ ] ) ; 

+gint  parseFields (tvbuff_t  *tvb,  proto_tree  *tree,  gint  offset,  DIS_ParserNode 
parserNodes [] ,  packet_info  *pinfo) ; 

#endif  /*  packet-dis-pduparsers .h  */ 

dif f  --git  a /epan/dis sector s/packet-dis . c  b /epan/dis sector s/packet-dis . c 
index  da012a9 . . 0a00009  100644 

-  a /epan/dis sector s/packet-dis . c 

+++  b/ epan/dis sector s/packet-dis . c 
@@  -46,6  +46,7  @@ 

#include  "packet-dis-enums .h" 

#include  "packet-dis-pdus .h" 

#include  "packet-dis-f ields .h" 

+#include  "packet-linkl6 .h" 

#define  DEFAULT_DIS_UDP_PORT  3000 

@@  -80,6  +81,7  @@  int  hf_dis_radio_id  =  -1; 
int  hf_dis_ens  =  -1; 
int  hf_dis_ens_class  =  -1; 
int  hf_dis_ens_type  =  -1; 

+int  hf_dis_ens_type_audio  =  -1; 
int  hf_dis_tdl_type  =  -1; 
int  hf_dis_sample_rate  =  -1; 
int  hf_dis_data_length  =  -1; 

@@  -122,6  +124,12  @@  int  hf_dis_antenna_pattern_parameter_dump  =  -1; 
int  hf_dis_num_shaf ts  =  -1; 
int  hf_dis_num_apas  =  -1; 
int  hf_dis_num_ua_emitter_systems  =  -1; 

+int  hf_dis_signal_linkl 6_npg  =  -1; 

+int  hf_dis_signal_linkl 6_tsec_cvll  =  -1; 

+int  hf_dis_signal_linkl 6_msec_cvll  =  -1; 

+int  hf_dis_signal_linkl 6_message_type  =  -1; 

+int  hf_dis_signal_linkl 6_ptt  =  -1; 

+int  hf_dis_signal_linkl 6_stn  =  -1; 

/*  Initialize  the  subtree  pointers  */ 
static  gint  ett_dis  =  -1; 

@@  -130,6  +138,8  @@  static  gint  ett_dis_po_header  =  -1; 
static  gint  ett_dis_payload  =  -1; 
int  ett_dis_ens  =  -1; 
int  ett_dis_crypto_key  =  -1; 

+int  ett_dis_signal_linkl 6_network_header  =  -1; 

+int  ett_dis_signal_linkl 6_message_data  =  -1; 

static  const  true_false_string  dis_modulation_spread_spectrum  =  { 

"Spread  Spectrum  modulation  in  use", 

@@  -206,7  +216,7  @@  static  gint  dissect_dis (tvbuff_t  *tvb,  packet_info  *pinfo,  proto_tree 
*tree,  voi 
*/ 

dis_header_node  =  proto_tree_add_text (dis_tree,  tvb,  offset,  -1,  "Header"); 
dis_header_tree  =  proto_item_add_subtree (dis_header_node,  ett_dis_header) ; 
offset  =  parseFields (tvb,  dis_header_tree,  offset,  DIS_FIELDS_PDU_HEADER) ; 

+  offset  =  parseFields (tvb,  dis_header_tree,  offset,  DIS_FIELDS_PDU_HEADER,  pinfo) ; 

proto_item_set_end (dis_header_node,  tvb,  offset); 

@@  -230,7  +240,7  @@  static  gint  dissect_dis (tvbuff_t  *tvb,  packet_info  *pinfo,  proto_tree 
*tree,  voi 
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(dis_po_header_node,  ett_dis_po_header ) ; 
offset  =  parseFields 

(tvb,  dis_po_header_tree,  offset, 

DIS_FIELDS_PERSISTENT_OBJECT_HEADER) ; 

+  DIS_FIELDS_PERSISTENT_OBJECT_HEADER,  pinfo) ; 

proto_item_set_end (dis_po_header_node,  tvb,  offset); 

/*  Locate  the  appropriate  PO  PDU  parser,  if  type  is  known. 

@@  -400,13  +410,15  @@  static  gint  dissect_dis (tvbuff_t  *tvb,  packet_info  *pinfo,  proto_tree 
*tree,  voi 

break; 

} 


+  col_clear (pinfo->cinfo,  C0L_1NF0) ; 

+ 

/*  If  a  parser  was  located,  invoke  it  on  the  data  packet. 

*/ 

if  (pduParser  !=  0) 

{ 

dis_payload_tree  =  proto_item_add_subtree (dis_payload_node, 
ett_dis_payload) ; 

offset  =  parseFields (tvb,  dis_payload_tree,  offset,  pduParser) ; 

+  offset  =  parseFields (tvb,  dis_payload_tree,  offset,  pduParser,  pinfo) ; 


proto_item_set_end (dis_payload_node,  tvb,  offset); 


} 


@@  -434,13  +446,17  @@  static  gint  dissect_dis (tvbuff_t  *tvb,  packet_info  *pinfo,  proto_tree 
*tree,  voi 

)  ; 

break; 

case  D1S_PDUTYPE_S1GNAL; 

col_add_fstr (  pinfo->cinfo,  C0L_1NF0, 

"PDUType:  %s,  RadiolD=%u,  Encoding  Type=%s,  Number  of  Samples=%u", 

pduString, 

radiolD, 

val_to_str_const (D1S_ENC0D1NG_TYPE (encodingScheme) , 
DlS_PDU_Encoding_Type_Strings,  "Unknown  Encoding  Type"), 

numSamples 

)  ; 

if  (numSamples) 

col_prepend_f str (pinfo->cinfo,  C0L_1NF0,  ",  Number  of  Samples=%u", 
numSamples) ; 


@@ 


if  ( (encodingScheme  &  OxCOOO)  »  14  ==  D1S_ENC0D1NG_CLASS_ENC0DED_AUD10) 
col_prepend_f str (pinfo->cinfo,  C0L_1NF0,",  Encoding  Type=%s", 
val_to_str_const (D1S_ENC0D1NG_TYPE (encodingScheme) , 
DlS_PDU_Encoding_Type_Strings,  "Unknown") ) ; 

col_prepend_fstr (  pinfo->cinfo,  C0L_1NF0, 

"PDUType:  %s,  RadiolD=%u",  pduString,  radiolD); 

break; 

case  D1S_PDUTYPE_TRANSM1TTER; 

col_add_fstr (  pinfo->cinfo,  C0L_1NF0, 

-593,6  +609,11  @@  void  proto_register_dis (void) 


{ 


+ 

+ 

+ 

+ 

+ 


} 

{ 


} 

@@  -791,6  +812 


&hf _di s_ens_type , 

{  "Encoding  Type",  "dis . radio . encoding_type" , 

FT_U1NT16,  BASE_DEC,  NULL,  0x3fff, 

NULL,  HFILL  } 

&hf_dis_ens_type_audio, 

{  "Encoding  Type",  "dis . radio . encoding_type . audio" , 

FT_U1NT16,  BASE_DEC,  VALS ( D1 S_PDU_Encoding_Type_Str ings ) , 
NULL,  HFILL  } 

35  @@  void  proto_register_dis (void) 

FT_BYTES,  BASE_NONE,  NULL,  0x0, 

NULL,  HFILL) 


0x3fff , 


+ 

+ 


&hf_dis_signal_linkl 6_npg, 

{  "NPG  Number",  "dis . signal . linkl 6 . npg" , 
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+ 

+ 

+ 

+ 

+ 

+ 

RVALS ( 
+ 

+ 

+ 

+ 

+ 

RVALS ( 
+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

0x0, 

+ 

+ 


FT_UINT16,  BASE_DEC,  VALS (Linkl6_NPG_Strings) ,  0x0, 

NULL,  HFILL  } 

}, 

{  &hf_dis_signal_linkl 6_tsec_cvll , 

{  "TSEC  CVLL",  "dis . signal . linkl 6 . tsec_cvll" , 

FT_UINT8,  BASE_RANGE_STRING  |  BASE_DEC, 

DIS_PDU_Linkl6_CVLL_Strings) ,  0x0, 

NULL,  HFILL  } 

}, 

{  &hf_dis_signal_linkl 6_msec_cvll , 

{  "MSEC  CVLL",  "dis . signal . linkl 6 .msec_cvll" , 

FT_UINT8,  BASE_RANGE_STRING  |  BASE_DEC, 

DIS_PDU_Linkl6_CVLL_Strings) ,  0x0, 

NULL,  HFILL  } 

}, 

{  &hf_dis_signal_linkl 6_message_type, 

{  "Message  Type",  "dis . signal . Iinkl6 .message_type" , 

FT_UINT8,  BASE_DEC,  VALS ( DI S_PDU_Linkl 6_MessageType_Strings ) ,  0x0, 

NULL,  HFILL  } 

}, 

{  &hf_dis_signal_linkl6_ptt, 

{  "Perceived  Transmit  Time",  "dis . signal . Iinkl6 .ptt" , 

FT_ABSOLUTE_TIME,  ABSOLUTE_TIME_UTC,  NULL,  0x0, 

NULL,  HFILL  } 

}, 

{  &hf_dis_signal_linkl6_stn, 

{  "Source  Track  Number",  "dis . signal . linkl 6 . stn" ,  FT_UINT16,  BASE_OCT,  NULL, 


NULL,  HFILL  } 


{ 


&hf_dis_num_shaf ts , 

{  "Number  of  Shafts",  "dis .ua . number_of_shafts" , 
FT_UINT8,  BASE_DEC,  NULL,  0x0, 

@@  -816,7  +866,9  @@  void  proto_register_dis (void) 
&ett_dis_po_header , 

&ett_dis_ens, 

&ett_dis_crypto_key, 

&ett_dis_payload 
+  &ett_dis_payload, 

+  &ett_dis_signal_linkl 6_network_header , 

+  &ett_dis_signal_linkl 6_message_data, 

}; 


module_t  *dis_module; 

1.8. 1.2 


Figure  A2:  Software  patch  (part  2  of  3) 


From  6ef9c448729ba0270a4f2552b817dlceb4fc4de7  Mon  Sep  17  00:00:00  2001 
From:  Peter  Ross  <peter . ross@dsto . defence . gov. au> 

Date:  Wed,  16  Oct  2013  10:00:03  +1100 

Subject:  [PATCH  3/3]  packet-dis:  correct  'Terminal  Primary  Mode'  and  'Sync 
State'  enumeration  values 

SlSO-STD-002  Standard  for  Link  16  Simulations,  June  2006: 

http : / /www . sisostds . org/DigitalLibrary . aspx?Command=Core_Download&Entryld=302  65 

epan/dissectors/packet-dis-enums . c  I  9  ++++ - 

1  file  changed,  4  insertions (+) ,  5  deletions]-) 

diff  --git  a/epan/dissectors/packet-dis-enums . c  b/epan/dissectors/packet-dis-enums . c 
index  d53b3a7 . . 835bbl7  100644 

-  a/epan/dissectors/packet-dis-enums . c 

+++  b/epan/dissectors/packet-dis-enums . c 

@@  -668,8  +668,8  @@  const  value_string  DlS_PDU_TSAllocationFidelity_Strings [ ]  = 
const  value_string  DlS_PDU_TerminalPrimaryMode_Strings [ ]  = 
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- 

{0, 

"NTR"  } , 

- 

{1, 

"JTIDS  Unit  Participant"  }, 

+ 

{1, 

"NTR"  } , 

+ 

{2, 

"JTIDS  Unit  Participant"  }, 

}; 

{0, 

NULL  } 

@@ 

-685,9 

+685,8  @@  const  value  string  DIS  PDU  TerminalSecondaryMode  Strings 

_ 

/* 

http ; 

//discussions . sisostds . org/threadview. aspx?f id=18&threadid=53172  */ 

const  value  string  DIS  PDU  ModParamSyncState  Strings []  = 

{0, 

"Undefined"  } , 

- 

{1, 

"Coarse  Synchronization"  }, 

- 

{1, 

"Fine  Synchronization"  }, 

+ 

{2, 

"Coarse  Synchronization"  }, 

+ 

{3, 

"Fine  Synchronization"  }, 

}; 

{0, 

NULL  } 

1.8 

.1.2 

Figure  A3:  Software  patch  (part  3  of  3) 
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is  a  United  States  and  North  Atlantic  Treaty  Organization  standard  for  secure  real-time  exchange  of  tactical  information  between  warfighting 
emits.  Concurrent  with  military  adoption  of  Link  16  equipment,  training  simulators  are  being  fitted  with  simulated  tactical  data  links.  The 
extensions  made  to  Wireshark  provide  simulation  engineers  with  a  tool  to  troubleshoot  Link  16  simulations. 
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